PT-2023-1226

Name of the Vulnerable Software and Affected Versions Vim versions 8.1.2269 through 9.0.0339 Description A null pointer dereference issue was discovered in the gui x11 create blank mouse function in gui x11.c, allowing attackers to cause denial of service or other unspecified impacts. This issue...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5613-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5613-1 advisory. It was discovered that Vim was not properly performing bounds checks when executing spell suggestion commands. An attacker could...

Denial Of Service (DoS)

vim is vulnerable to Denial Of Service DoS.The vulnerability exists due to lack of proper initialization of the mouse click in domouse function in mouse.c, which allows an attacker to crash the application by providing a malicious input...

Use-After-Free

vim is vulnerable to Use-After-Free. A remote attacker is able to cause use after free conditions via the function qffillbuffer at vim/src/quickfix.c...

Use After Free in function getcmdline_int

Description Use After Free in function getcmdlineint at vim/src/exgetln.c:2547. vim version git log commit 470a14140bc06f1653edf26ab0b3c9b801080353 grafted, HEAD - master, tag: v9.0.0461, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

Heap-based Buffer Overflow in function utfc_ptr2len

Description Heap-based Buffer Overflow in function utfcptr2len at vim/src/mbyte.c:2125. vim version git log commit 470a14140bc06f1653edf26ab0b3c9b801080353 grafted, HEAD - master, tag: v9.0.0461, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

[SECURITY] Fedora 35 Update: vim-9.0.412-1.fc35

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

[SECURITY] Fedora 36 Update: vim-9.0.412-1.fc36

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

[SECURITY] Fedora 37 Update: vim-9.0.412-1.fc37

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2307)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-4868

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.0490 Description The issue is related to a Use After Free condition in the getcmdline int function of the Vim text editor, which involves the use of memory after it has been freed. This can be exploited by an attacker...

PT-2022-4867

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0483 Description The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the utfc ptr2len function. This can be exploited by opening a specially crafted malicious file, potentially...

CVE-2022-3153

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation...

CVE-2022-3134

A heap use-after-free vulnerability was found in vim's dotag function of the src/tag.c file. The issue triggers when the 'tagfunc' closes the window. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to...

Use-After-Free

vim, edge is vulnerable to use-after-free. The vulnerability exists in qffillbuffer function in quickfix.c because user input not properly sanitization which allows an attacker to inject and execute malicious code into the system into the system...

Use-After-Free

vim:edge is vulnerable to use-after-free. The vulnerability exist in the getnextvalidentry function in quickfix.c because vim is using freed memory when the location list is changed in autocmd...

vim code issue vulnerability (CNVD-2022-68079)

Vim is a cross-platform text editor. vim versions prior to 9.0.0404 have a code issue vulnerability that stems from null pointer references. No detailed vulnerability details are currently available...

SUSE: Security Advisory (SUSE-SU-2022:3229-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2022-252-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...