[SECURITY] Fedora 36 Update: vim-9.0.412-1.fc36

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

[SECURITY] Fedora 37 Update: vim-9.0.412-1.fc37

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2307)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3153

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation...

CVE-2022-3134

A heap use-after-free vulnerability was found in vim's dotag function of the src/tag.c file. The issue triggers when the 'tagfunc' closes the window. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to...

Use-After-Free

vim, edge is vulnerable to use-after-free. The vulnerability exists in qffillbuffer function in quickfix.c because user input not properly sanitization which allows an attacker to inject and execute malicious code into the system into the system...

Use-After-Free

vim:edge is vulnerable to use-after-free. The vulnerability exist in the getnextvalidentry function in quickfix.c because vim is using freed memory when the location list is changed in autocmd...

vim code issue vulnerability (CNVD-2022-68079)

Vim is a cross-platform text editor. vim versions prior to 9.0.0404 have a code issue vulnerability that stems from null pointer references. No detailed vulnerability details are currently available...

Slackware: Security Advisory (SSA:2022-252-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the do_mouse() function in the Vim text editor allows a hacker to compromise the accessibility of the protected information.

The vulnerability of the domouse function in the Vim text editor is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

SUSE: Security Advisory (SUSE-SU-2022:3229-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.0417-i586-1slack15.0.txz: Upgraded. Fixed null pointer dereference. Thanks to marav for the heads-up. For more information, see:...

Slackware Linux 15.0 / current vim Vulnerability (SSA:2022-252-01)

The version of vim installed on the remote host is prior to 9.0.0417. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-252-01 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. CVE-2022-3153 Note that Nessus has not tested for this issu...

openSUSE: Security Advisory for vim (SUSE-SU-2022:3229-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2022:3229-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3229-1 advisory. Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through...

SUSE-SU-2022:3229-1 Security update for vim

This update for vim fixes the following issues: Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through getlispindent bsc1200902. - CVE-2022-2182: Fixed heap-based buffer overflow through parsecmdaddress bsc1200903. - CVE-2022-2175: Fixed buffer over-read...

Use After Free in vim/vim

...

ROS-20220909-01

A vulnerability in the vimvsnprintftypval function of the Vim text editor is related to the use of memory after it has been freed. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information Vim text editor vulnerability i...

The vulnerability of the utf_ptr2char function in the Vim text editor allows for reading data beyond the buffer’s boundaries in memory, enabling an attacker to execute arbitrary code.

The vulnerability of the utfptr2char function in the Vim text editor relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...