Withdrawn by the publisher.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP2: vim, openEuler:20.03-LTS-SP3: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.(CVE-2022-0554) Out-of-bounds Read in vim/vim prior to 8.2.(CVE-2022-0319) Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0629) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0572)

gvim-9.0.0453-2.1 on GA media

Affected: Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:18.04:LTS: vim, Ubuntu:20.04:LTS: vim, Ubuntu:22.04:LTS: vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

UPDATE A: Two devices (ENERGY AXC PU, SMARTRTU AXC SG) added (24.11.2022) Update for PLCnext Firmware containing fixes for recent vulnerability findings in Linux components and security enhancements. PLCnext Control AXC F x152 is certified according to IEC 62443-4-1 and IEC 62443-4-2. This certification requires that all third-party components used in the firmware are regularly checked for known vulnerabilities.

Ein lokaler Angreifer kann eine Schwachstelle in vim ausnutzen, um beliebigen Programmcode auszuführen.