CVE-2022-2124

Buffer Over-read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2125

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-2126

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-2129

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

[SECURITY] Fedora 35 Update: vim-8.2.5085-1.fc35

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Critical Photon OS Security Update - PHSA-2022-0406

Updates of 'vim', 'python-lxml', 'curl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0199

Updates of 'ruby', 'vim' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-3.0-0406

Updates of 'vim', 'python-lxml', 'curl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0199

Updates of 'vim', 'ruby' packages of Photon OS have been released...

openSUSE: Security Advisory for vim (SUSE-SU-2022:2102-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2102-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2022:2102-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2102-1 advisory. - CVE-2017-17087: Fixed information leak via .swp files bsc1070955. - CVE-2021-3875: Fixed heap-based buffer...

EulerOS 2.0 SP5 : vim (EulerOS-SA-2022-1918)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-0413, CVE-2022-0443 ...

CVE-2022-2042

A heap use-after-free vulnerability was found in Vim's skipwhite function of the src/charset.c file. This flaw occurs because of an uninitialized attribute value and freed memory in the spell command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a...

SUSE-SU-2022:2102-1 Security update for vim

This update for vim fixes the following issues: - CVE-2017-17087: Fixed information leak via .swp files bsc1070955. - CVE-2021-3875: Fixed heap-based buffer overflow bsc1191770. - CVE-2021-3903: Fixed heap-based buffer overflow bsc1192167. - CVE-2021-3968: Fixed heap-based buffer overflow...

OESA-2022-1707 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

Heap-based Buffer Overflow in function get_lisp_indent

Description Heap-based Buffer Overflow in function getlispindent at indent.c:1994 vim version git log commit 83497f875881973df772cc4cc593766345df6c4a HEAD - master, tag: v8.2.5105, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/pochbo2s.dat -...

Out-of-bounds Read in function suggest_trie_walk

Description Out-of-bounds Read in function suggesttriewalk at spellsuggest.c:1437 vim version git log commit 83497f875881973df772cc4cc593766345df6c4a HEAD - master, tag: v8.2.5105, origin/master, origin/HEAD POC root@fuzz-vm0-187:/home/fuzz/fuzz/vim/afl/src ./vim -u NONE -i NONE -n -m -X -Z -e -s...

Out-of-bounds write in function vim_regsub_both

Description Out-of-bounds write in function vimregsubboth at regexp.c:1973 vim version git log commit 83497f875881973df772cc4cc593766345df6c4a HEAD - master, tag: v8.2.5105, origin/master, origin/HEAD POC root@fuzz-vm0-187:/home/fuzz/fuzz/vim/afl/src ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

PT-2022-5220

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is related to an out-of-bounds write in the vim regsub both function of the regexp.c component in the Vim text editor. This can allow a remote attacker to access confidential data, compromise its...