Use After Free in GitHub repository vim/vim prior to 8.2.

Use After Free in GitHub repository vim/vim prior to 8.2.

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP3: vim, openEuler:22.03-LTS: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.(CVE-2022-1851) Use After Free in GitHub repository vim/vim prior to 8.2.(CVE-2022-1898) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-1942) Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.(CVE-2022-1897) Use After Free in GitHub repository vim/vim prior to 8.2.(CVE-2022-1968)

Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.(CVE-2022-1771)

gvim-9.0.0453-2.1 on GA media

Security update for vim

Affected: Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:18.04:LTS: vim, Ubuntu:20.04:LTS: vim, Ubuntu:22.04:LTS: vim

Use After Free in GitHub repository vim/vim prior to 8.2.

Ein lokaler Angreifer kann mehrere Schwachstellen in vim ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder sonstige Auswirkungen zu verursachen.