EulerOS Virtualization 2.9.0 : vim (EulerOS-SA-2022-1641)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...

EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2022-1617)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1617)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1641)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2022-0178

Updates of 'vim' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0178

Updates of 'vim', 'wget' packages of Photon OS have been released...

Fedora: Security Advisory for vim (FEDORA-2022-b605768c94)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: vim-8.2.4804-1.fc34

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

Oracle Linux 8 : vim (ELSA-2022-1552)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1552 advisory. 8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16.13 - CVE-2022-1154 vim: use after free in utfptr2char Tenable has extracted the...

vim security update

8.0.1763-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-16.13 - CVE-2022-1154 vim: use after free in utfptr2char...

Use of Out-of-range Pointer Offset in vim/vim

...

Use after free in append_command

✍️ Description When fuzzing vim commit fc78a0369 works with latest build and latest commit 202b4bd3a per this time of this report with clang 13 and ASan, I discovered a buffer overflow. Proof of Concept Here is the poc bash...

Buffer Over-read in function utfc_ptr2len

Description Buffer Over-read in function utfcptr2len at mbyte.c:2113 vim version git log commit 5a8fad32ea9c075f045b37d6c7739891d458f82b HEAD - master, tag: v8.2.4962, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/poch8s.dat -c :qa!...

Heap-based Buffer Overflow in function cmdline_erase_chars

Description Heap-based Buffer Overflow in function cmdlineerasechars at exgetln.c:1085 POC ./vim -u NONE -X -Z -e -s -S ./poch1.dat -c :qa! ================================================================= ==3840814==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60b00000087f at pc...

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729

Description NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 allows attackers to cause a denial of service application crash via a crafted input. POC ./vim -u NONE -X -Z -e -s -S ./pocn.dat -c :qa! Segmentation fault pocn.dat GDB ─── Output/messages...

PT-2022-2588

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4901 Description The issue is related to a NULL Pointer Dereference in the vim regexec string function at regexp.c:2729 in the Vim repository on GitHub. This allows attackers to cause a denial of service, resulting in...

PT-2022-2730

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4919 Description The issue is related to a heap buffer overflow in the vim strncpy find word function, which can cause software crashes, bypass protection mechanisms, modify memory, and potentially allow remote...

PT-2022-2586

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4899 Description The issue is related to a Heap-based Buffer Overflow in the cmdline erase chars function of the Vim text editor. This can lead to software crashes, memory modification, and potentially allow for remot...

PT-2022-2754

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4895 Description The issue is related to a use after free vulnerability in the append command function of the Vim text editor. This vulnerability can cause software crashes, bypass protection mechanisms, modify memory...

PT-2022-2734

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2.4969 Description The issue is related to a classic buffer overflow in the Vim text editor, specifically with the implementation of the utfc ptr2len function, which involves copying a buffer without checking the size o...