10371 matches found
Amazon Linux 2 : vim (ALAS-2022-1829)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1829 advisory. Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote...
Vim edit.c Code Execution
The vulnerability of the edit.c component of the Vim text editor is related to reading beyond the memory boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system...
heap-buffer-overflow occurs in function eval_string ./vim/src/typval.c:2226
Description heap-buffer-overflow occurs in evalstring ./vim/src/typval.c:2226, it should be allocated more memory at ./vim/src/typval.c:2126 vim version git log commit 5154a8880034b7bb94186d37bcecc6ee1a96f732 HEAD - master, tag: v9.0.0057, origin/master, origin/HEAD Proof of Concept Poc ./vim -u...
[SECURITY] Fedora 35 Update: golang-github-msprev-fzf-bibtex-1.1-3.20210317git53c49fa.fc35
A BibTeX source for fzf. fzf-bibtex uses BibTool parse BibTeX files, caches the results, and supports vim integration for users of the fzf.vim plugin. It includes support for Markdown and LaTeX citation formats...
Medium: vim
Issue Overview: Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution CVE-2022-1616 Heap-based Buffer Overflow in function cmdlineerasechars in...
Heap-based Buffer Overflow in vim/vim
...
Use After Free in vim/vim
...
CLSA-2022-1658171898 Fixed 7 CVEs in vim
CVE-2022-2206: adjust cmdlinerow and msgrow to the value of Rows - CVE-2022-2284: stop visual mode when closing a window - CVE-2022-2285: put a NUL after the typeahead - CVE-2022-2286: check the length of the string - CVE-2022-2287: disallow adding a word with control characters or a trailing...
CLSA-2022-1658171278 Fixed 7 CVEs in vim
CVE-2022-2206: adjust cmdlinerow and msgrow to the value of Rows - CVE-2022-2284: stop visual mode when closing a window - CVE-2022-2285: put a NUL after the typeahead - CVE-2022-2286: check the length of the string - CVE-2022-2287: disallow adding a word with control characters or a trailing...
Fixed 7 CVEs in vim
CVE-2022-2206: adjust cmdlinerow and msgrow to the value of Rows - CVE-2022-2284: stop visual mode when closing a window - CVE-2022-2285: put a NUL after the typeahead - CVE-2022-2286: check the length of the string - CVE-2022-2287: disallow adding a word with control characters or a trailing...
Denial Of Service (DoS)
vim is vulnerable to denial of service. An attacker can crash the application through the integer overflow or wraparound...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. The vulnerability exists in utfcptr2len function at mbyte.c which allows an attacker to cause a buffer overflow...
Out-Of-Bounds Read
vim:edge is vulnerable to out of bounds read. The vulnerability exists in the suggesttriewalk function from spellsuggest.c which allows an attacker to cause out of bound reads...
Out-Of-Bounds Read
vim:edge is vulnerable to out of bounds read. A remote attacker is able to perform out of bound reads...
Out-of-bounds Writes
vim is vulnerable to out-of-bounds writes. The vulnerability allows an attacker to cause a memory corruption which then may lead to denial of service...
EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-2085)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. CVE-2022-0943 Note that Tenable Network...
PT-2022-7129
Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.0100 Description The issue is related to an out-of-bounds write in the vim text editor, specifically in the diff write buffer function. This allows an attacker to cause a denial of service using a specially crafted...
Fedora: Security Advisory for vim (FEDORA-2022-b06fbea2c7)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2022-3883
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0061 Description The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the implementation of the ins compl infercase gettext function. This overflow occurs when an operation...
