PT-2022-7128

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0101 Description The issue is related to a heap-based buffer overflow in the vim iswordp buf function of the Vim text editor. This allows an attacker to access confidential data, compromise its integrity, and...

CVE-2022-2345

Use After Free in GitHub repository vim/vim prior to 9.0.0046...

CVE-2022-2343

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044...

CVE-2022-2345

CVE-2022-2345 affects the Vim/Vim package, with the vulnerability present in versions prior to 9.0.0046. The issue is described as a Use-After-Free in Vim/vim, indicating memory-management misuse when handling input. The connected documents confirm Vim-related CVEs in the same family, but do not ...

CVE-2022-2345 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0046...

Vim resource management error vulnerability

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 9.0.0046 that originates from a heap use-after-free in the function skipwhite, which can be exploited by an attacker to trigger a denial of service and potentially run code...

CVE-2022-2345 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0046...

Vim Resource Management Error Vulnerability (CNVD-2022-55380)

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 9.0.0046 that originates from a heap use-after-free in the function skipwhite, which can be exploited by an attacker to trigger a denial of service and potentially run code...

CVE-2022-2343 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044...

Unspecified vulnerability in vim (CNVD-2022-55381)

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 9.0.0044 that stems from a heap-based buffer overflow. No details of the vulnerability are provided at this time...

Vim security vulnerabilities

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 9.0.0044 that stems from a heap-based buffer overflow. No details of the vulnerability are provided at this time...

CVE-2022-2345: Use After Free

Use After Free in GitHub repository vim/vim prior to 9.0.0046...

CVE-2022-2343

CVE-2022-2343 is a heap-based buffer overflow in Vim (vim/vim) prior to 9.0.0044. The vulnerability involves ins_compl_add in insexpand.c and related paths, with exploitation possible by opening a specially crafted file which can crash Vim and may corrupt memory or allow code execution. The Conne...

CVE-2022-2343: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2014)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1984)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5507-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5507-1 advisory. It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the program to crash, use unexpected...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2014)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. CVE-2022-0696 - Use after free in utfptr2char in GitHub repository vim/vim...

Fixed CVEs in vim: CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

CLSA-2022-1657182572 Fixed CVEs in vim: CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...