Fixed 7 CVEs in vim

CVE-2022-2206: adjust cmdlinerow and msgrow to the value of Rows - CVE-2022-2284: stop visual mode when closing a window - CVE-2022-2285: put a NUL after the typeahead - CVE-2022-2286: check the length of the string - CVE-2022-2287: disallow adding a word with control characters or a trailing...

Denial Of Service (DoS)

vim is vulnerable to denial of service. An attacker can crash the application through the integer overflow or wraparound...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. The vulnerability exists in utfcptr2len function at mbyte.c which allows an attacker to cause a buffer overflow...

Out-Of-Bounds Read

vim:edge is vulnerable to out of bounds read. The vulnerability exists in the suggesttriewalk function from spellsuggest.c which allows an attacker to cause out of bound reads...

Out-Of-Bounds Read

vim:edge is vulnerable to out of bounds read. A remote attacker is able to perform out of bound reads...

Out-of-bounds Writes

vim is vulnerable to out-of-bounds writes. The vulnerability allows an attacker to cause a memory corruption which then may lead to denial of service...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-2085)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. CVE-2022-0943 Note that Tenable Network...

Fedora: Security Advisory for vim (FEDORA-2022-b06fbea2c7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-2129 affecting package vim 8.2.5064-1

CVE-2022-2129 affecting package vim 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2208 affecting package vim 8.2.5154-1

CVE-2022-2208 affecting package vim 8.2.5154-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2125 affecting package vim 8.2.5064-1

CVE-2022-2125 affecting package vim 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2124 affecting package vim 8.2.5064-1

CVE-2022-2124 affecting package vim 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2206 affecting package vim 8.2.5154-1

CVE-2022-2206 affecting package vim 8.2.5154-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2210 affecting package vim 8.2.5154-1

CVE-2022-2210 affecting package vim 8.2.5154-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2207 affecting package vim 8.2.5154-1

CVE-2022-2207 affecting package vim 8.2.5154-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2126 affecting package vim 8.2.5064-1

CVE-2022-2126 affecting package vim 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CLSA-2022-1657816156 Fixed CVEs in vim: CVE-2022-2210, CVE-2022-2183, CVE-2022-2207, CVE-2022-2182

CVE-2022-2182: when on line zero check the column is valid for line one - CVE-2022-2183: avoid going over the NUL at the end of the line - CVE-2022-2207: check the cursor column is more than zero - CVE-2022-2210: use zero offset when change removes all lines in a diff block...

[SECURITY] Fedora 36 Update: vim-9.0.049-1.fc36

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2103)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5516-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5516-1 advisory. It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the corruption of sensitive...