10365 matches found
Amazon Linux 2 : vim (ALAS-2022-1868)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1868 advisory. A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened i...
Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-155 advisory. A use-after-free vulnerability was found in vim's docmdline function of the src/exdocmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker t...
Use After Free in function qf_get_curlist
Description Use After Free in function qfgetcurlist at quickfix.c:1932 . vim version git log commit bf72e0c67f26ea7c8fd941fdd1533c24c7b6cb43 grafted, HEAD - master, tag: v9.0.0792, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/fuzz/test/poc14huaf.dat...
WS-2022-0419
Use After Free in function qfgetcurlist in vim/vim...
Fedora: Security Advisory for vim (FEDORA-2022-fff548cfab)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2022-7576
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0804 Description The issue is related to incorrect numerical computations when handling floating-point values in the num divide function of the Vim text editor. This can allow an attacker to access confidential data a...
CVE-2022-3296 affecting package vim for versions less than 9.0.0614-1
CVE-2022-3296 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-3278 affecting package vim for versions less than 9.0.0614-1
CVE-2022-3278 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-3256 affecting package vim for versions less than 9.0.0614-1
CVE-2022-3256 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-3352 affecting package vim for versions less than 9.0.0614-1
CVE-2022-3352 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-3297 affecting package vim for versions less than 9.0.0614-1
CVE-2022-3297 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-3324 affecting package vim for versions less than 9.0.0614-1
CVE-2022-3324 affecting package vim for versions less than 9.0.0614-1. An upgraded version of the package is available that resolves this issue...
[SECURITY] Fedora 35 Update: vim-9.0.720-1.fc35
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
PT-2022-7599 · Vim +6 · Vim +6
Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.0789 Description: The issue is related to a Use After Free vulnerability in the buffer.c component of the Vim text editor. This vulnerability allows an attacker to access confidential data, compromise data integrity,...
Fedora: Security Advisory for vim (FEDORA-2022-40161673a3)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
heap-buffer-overflow in function inc at misc2.c
Description heap-buffer-overflow in function inc at misc2.c:356:6 vim version shell git log commit ba43e76fcd5b2da57dbaa4d9a555793fe8ac344e HEAD - master, tag: v9.0.0747, origin/master, origin/HEAD Proof of Concept shell ./src/vim -u NONE -X -Z -e -s -S ./poc -c ':qa!'...
[SECURITY] Fedora 36 Update: vim-9.0.720-1.fc36
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
OESA-2022-1980 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
PT-2022-7600 · Vim +6 · Vim +6
Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.0.0765 Description: The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the inc function. This allows an attacker to access confidential data, compromise its integrity, and caus...