USN-5613-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that Vim was not properly performing bounds checks when executing spell suggestion commands. An attacker could possibly use this issue to cause a denial of service or execute arbitrary...

Vim resource management error vulnerability

Vim is a cross-platform text editor. A security vulnerability exists in Vim versions prior to 9.0.0614, which stems from a confusion in the instruction in the didsetstringoption function that the program is responsible for freeing memory. An attacker can exploit the vulnerability to potentially...

fileio.c component

The vulnerability of the fileio.c component, /etc/shadow, and /etc/.shadow.swp from the Vim text editor is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Vim getvcol function Heap Buffer Overflow Info Disclosure

The vulnerability of the getvcol function in the src/charset.c file of the Vim text editor is related to the escape character being interpreted beyond its intended scope when using /%V. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Vim ex_retab Heap Buffer Overflow DoS

The vulnerability of the exretab function in the src/indent.c file of the Vim text editor is related to the issue where the operation escapes the buffer boundaries into memory when :retab 0 is used. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise i...

Vim enter_buffer() Buffer Overflow DoS

The vulnerability of the enterbuffer function in the Vim text editor is related to the pointer being moved beyond the allocated memory range. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Vim unix_expandpath Path Traversal

The vulnerability of the unixexpandpath function in the Vim text editor is related to incorrect handling of a special multi-byte character. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Vim gchar_cursor Heap Buffer Overflow DoS

The vulnerability of the gcharcursor function in the misc1.c file of the Vim text editor involves reading data beyond the allowable buffer limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Vim find_pattern_in_path Buffer Overflow DoS

The vulnerability of the findpatterninpath function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

Vim code issues and vulnerabilities

Vim is a cross-platform text editor. a code issue vulnerability exists in versions prior to Vim 8.2.4959, which stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

DEBIAN-CVE-2022-3324

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

AZL-11049 CVE-2022-3324 affecting package vim for versions less than 9.0.0614-1

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

CVE-2022-3324

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

UBUNTU-CVE-2022-3324

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

Stack overflow

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

Use After Free in function did_set_string_option

Description Use After Free in function didsetstringoption at optionstr.c:2456. vim version git log commit 8279af514ca7e5fd3c31cf13b0864163d1a0bfeb grafted, HEAD - master, tag: v9.0.0598, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

NULL Pointer Dereference in vim/vim

...

CVE-2022-3324

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...

Slackware: Security Advisory (SSA:2022-269-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-4992

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.0614 Description The issue is related to a Use After Free vulnerability in the did set string option function of the Vim text editor. This vulnerability can be exploited by opening a specially crafted file, potentiall...