Fedora: Security Advisory for vim (FEDORA-2022-b605768c94)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: vim-8.2.4804-1.fc34

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Oracle Linux 8 : vim (ELSA-2022-1552)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1552 advisory. 8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16.13 - CVE-2022-1154 vim: use after free in utfptr2char Tenable has extracted the...

vim security update

8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16.13 - CVE-2022-1154 vim: use after free in utfptr2char...

Use of Out-of-range Pointer Offset in vim/vim

...

Use after free in append_command

✍️ Description When fuzzing vim commit fc78a0369 works with latest build and latest commit 202b4bd3a per this time of this report with clang 13 and ASan, I discovered a buffer overflow. Proof of Concept Here is the poc bash...

Buffer Over-read in function utfc_ptr2len

Description Buffer Over-read in function utfcptr2len at mbyte.c:2113 vim version git log commit 5a8fad32ea9c075f045b37d6c7739891d458f82b HEAD - master, tag: v8.2.4962, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch8s.dat -c :qa!...

Heap-based Buffer Overflow in function cmdline_erase_chars

Description Heap-based Buffer Overflow in function cmdlineerasechars at exgetln.c:1085 POC ./vim -u NONE -X -Z -e -s -S ./poch1.dat -c :qa! ================================================================= ==3840814==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60b00000087f at pc...

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729

Description NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 allows attackers to cause a denial of service application crash via a crafted input. POC ./vim -u NONE -X -Z -e -s -S ./pocn.dat -c :qa! Segmentation fault pocn.dat GDB ─── Output/messages...

global heap buffer overflow in skip_range in vim/vim

...

RHEL 8 : vim (RHSA-2022:1552)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1552 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: use after free in utfptr2char CVE-2022-1154 Tenable has...

vim: use after free in utf_ptr2char

A heap use-after-free vulnerability was found in Vim's utfptr2char function of the src/mbyte.c file. This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering...

Moderate: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1154 affecting package vim for versions less than 8.2.4743-1

CVE-2022-1154 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0729 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0729 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0685 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0685 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0629 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0629 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0443 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0443 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-0417 affecting package vim for versions less than 8.2.4743-1

CVE-2022-0417 affecting package vim for versions less than 8.2.4743-1. An upgraded version of the package is available that resolves this issue...