Use-After-Free

vim is vulnerable to use-after-free. The vulnerability is possible because the didsetstringoption refers memory even after it has been freed, leading to a heap use-after-free vulnerability...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-2483)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

EulerOS 2.0 SP5 : vim (EulerOS-SA-2022-2451)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in GitHub repository vim/vim prior to 8.2. CVE-2022-2124 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Vim Resource Management Error Vulnerability (CNVD-2022-68074)

Vim is a cross-platform text editor. A security vulnerability exists in Vim versions prior to 9.0.0614, which stems from a confusion in the instruction in the didsetstringoption function that the program is responsible for freeing memory. An attacker can exploit the vulnerability to potentially...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2423)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-1898, CVE-2022-2042 - Heap-based Buffer Overflow in GitHub repository vim/vim...

CVE-2022-3324

A stack-based buffer overflow vulnerability was found in Vim's winredrruler function of the src/drawscreen.c file. The issue occurs when using a negative array index with a negative width window. This flaw allows an attacker to trick a user into opening a specially crafted file, which triggers th...

CVE-2022-3256

A heap use-after-free vulnerability was found in vim's movemark function of the src/mark.c file. This issue occurs because vim uses freed memory when 'autocmd' changes the mark. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free th...

CVE-2022-1725

A NULL pointer dereference vulnerability was found in Vim's vimregexecstring function of the src/regexp.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service. Mitigation Untrusted vim scrip...

CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3153 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3153 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3134 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3134 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3235 affecting package vim for versions less than 9.0.0490-1

CVE-2022-3235 affecting package vim for versions less than 9.0.0490-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3134 affecting package vim 9.0.0360-1

CVE-2022-3134 affecting package vim 9.0.0360-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3153 affecting package vim 9.0.0360-1

CVE-2022-3153 affecting package vim 9.0.0360-1. An upgraded version of the package is available that resolves this issue...

ROS-20221004-01

Vim text editor vulnerability is related to a boundary error during file processing in the function exfinally in exeval.c. Exploitation of the vulnerability could allow an attacker acting remotely, create a special file, force the victim to open it, cause memory corruption, and execute arbitrary...

Security Bulletin: Multiple Vulnerabilities in Cloud Pak for Watson AIOPs

Summary 3.5 Fixes the following vulnerabilities: CVE-2022-1154, CVE-2018-25032, CVE-2020-29582, CVE-2022-24329, CVE-2022-29217, CVE-2022-22476, CVE-2022-1271, CVE-2022-0778 Vulnerability Details CVEID:CVE-2022-1154 DESCRIPTION: Vim is vulnerable to a heap-based buffer overflow, caused by a...

Slackware: Security Advisory (SSA:2022-273-04)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Use After Free in vim/vim

...

Buffer Overflow

vim is vulnerable to buffer overflow. The vulnerability exists because the illegal memory access when replacing in virtualedit mode which allows an attacker to crash the application via malicious input...