Most recent entries from all

ALSA-2021:4517 — Moderate: vim security update

Affected: AlmaLinux:8: vim-X11, AlmaLinux:8: vim-common, AlmaLinux:8: vim-enhanced, AlmaLinux:8: vim-filesystem, AlmaLinux:8: vim-minimal

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c (CVE-2021-3778)

* vim: use-after-free in nv_replace() in normal.c (CVE-2021-3796)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-05417

Withdrawn: BELL-CVE-2021-3796 — CVE-2021-3796 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-928 — De multiples vulnérabilités ont été découvertes dans les produits Stormshield. Certaines d'entre elles permettent à un…

certfr-2021-avi-928

cnvd-2021-99302

EUVD-2026-21102

fkie_cve-2021-3796

vim is vulnerable to Use After Free

GHSA-vvqg-2hw5-x5xp

vim is vulnerable to Use After Free

gsd-2021-3796

msrc_CVE-2021-3796 — Use After Free in vim/vim

msrc_CVE-2021-3796

OESA-2021-1356 — vim security update

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP2: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): vim is vulnerable to Heap-based Buffer Overflow(CVE-2021-3778) vim is vulnerable to Use After Free(CVE-2021-3796)

openSUSE-SU-2022:0736-1 — Security update for vim

Security update for vim

SUSE-SU-2022:0736-1 — Security update for vim

Security update for vim

UBUNTU-CVE-2021-3796

Affected: Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:18.04:LTS: vim, Ubuntu:20.04:LTS: vim

vim is vulnerable to Use After Free

VDE-2022-046 — PHOENIX CONTACT: Multiple Linux component vulnerabilities in PLCnext Firmware

UPDATE A: Two devices (ENERGY AXC PU, SMARTRTU AXC SG) added (24.11.2022) Update for PLCnext Firmware containing fixes for recent vulnerability findings in Linux components and security enhancements. PLCnext Control AXC F x152 is certified according to IEC 62443-4-1 and IEC 62443-4-2. This certification requires that all third-party components used in the firmware are regularly checked for known vulnerabilities.

WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator…

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.