EulerOS 2.0 SP9 : vim (EulerOS-SA-2021-2921)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3770, CVE-2021-3778 - vim is vulnerable to Use After Free CVE-2021-3796 Note that Tenable...

CVE-2021-4187

A flaw was found in vim. A possible use after free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution...

CVE-2021-4187

vim is vulnerable to Use After Free...

CVE-2021-4187

vim is vulnerable to Use After Free...

ALPINE-CVE-2021-4187

vim is vulnerable to Use After Free...

AZL-7111 CVE-2021-4187 affecting package vim for versions less than 8.2.4081-1

vim is vulnerable to Use After Free...

DEBIAN-CVE-2021-4187

vim is vulnerable to Use After Free...

UBUNTU-CVE-2021-4187

vim is vulnerable to Use After Free...

CVE-2021-4187

vim is vulnerable to Use After Free...

Design/Logic Flaw

vim is vulnerable to Use After Free...

CVE-2021-4187

vim is vulnerable to Use After Free...

CVE-2021-4187

CVE-2021-4187 (vim) is listed in Debian LTS advisory DLA-4097-1 for Vim on Debian 11 (bullseye). The connected document specifies a memory corruption issue: a Double free in the VimScript9 compiler when a nested function has a line break in its argument list. Debian fixes this in vim package vers...

CVE-2021-4187 Use After Free in vim/vim

vim is vulnerable to Use After Free...

in vim/vim

Description A heap-based OOB read of size 1 occurs when a user tries to open a vim session file specified below. This happens regardless of any command line options that could be specified to restrict vim, such -Z and -m. This bug has been found on default vim build version 8.2.3931, commit hash...

None in vim/vim

Description A use after free vulnerability has been found in vim 8.2.3931 commit hash febb78fa1798e0f95983b3f7881419a754886df5. The bug has been reproduced on Ubuntu 20.04 with gcc 9.3.0. Proof of Concept After building vim with gcc and ASAN run vim with the following session file: $ echo -ne...

PT-2021-7395 · Vim +11 · Vim +11

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to an out-of-bounds read in the vim text editor. It is associated with the getvcol function in the src/charset.c component and can be triggered when using /%V. This allows ...

CVE-2021-4173

A flaw was found in vim. A possible use after free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution...

CVE-2021-4166

A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution...

Heap-based Buffer Overflow in vim/vim

...

None in vim/vim

Description Hello there! Hope you are having an awesome day! 🤗 After I saw the last Rick de Jager's report, I decided to pick up their PoC as a valid input for fuzzing vim on its patch 8.2.3912, and ended up finding a new case of double-free! For testing, I compiled vim with GCC 9.3.0, and my O.S...