Most recent entries from all

ALSA-2022:0366 — Moderate: vim security update

Affected: AlmaLinux:8: vim-X11, AlmaLinux:8: vim-common, AlmaLinux:8: vim-enhanced, AlmaLinux:8: vim-filesystem, AlmaLinux:8: vim-minimal

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: heap-based buffer overflow in win_redr_status() in drawscreen.c (CVE-2021-3872)

* vim: illegal memory access in find_start_brace() in cindent.c when C-indenting (CVE-2021-3984)

* vim: heap-based buffer overflow in find_help_tags() in help.c (CVE-2021-4019)

* vim: use-after-free in win_linetabsize() (CVE-2021-4192)

* vim: out-of-bound read in getvcol() (CVE-2021-4193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-05501

Withdrawn: BELL-CVE-2021-3984 — CVE-2021-3984 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2022-avi-330 — De multiples vulnérabilités ont été découvertes dans Stormshield Network Security. Certaines d'entre elles permettent à…

certfr-2022-avi-330

cnvd-2022-05067

EUVD-2026-21202

fkie_cve-2021-3984

vim is vulnerable to Heap-based Buffer Overflow

GHSA-4jr3-2x33-xqgg

vim is vulnerable to Heap-based Buffer Overflow

gsd-2021-3984

msrc_CVE-2021-3984 — Heap-based Buffer Overflow in vim/vim

msrc_CVE-2021-3984

OESA-2021-1457 — vim security update

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP2: vim

Vim is a highly configurable text editor for efficiently creating and changing any kind of text. Security Fix(es): vim is vulnerable to Heap-based Buffer Overflow(CVE-2021-3984)

openSUSE-SU-2022:0736-1 — Security update for vim

Security update for vim

SUSE-SU-2022:0736-1 — Security update for vim

Security update for vim

UBUNTU-CVE-2021-3984

Affected: Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:18.04:LTS: vim, Ubuntu:20.04:LTS: vim

vim is vulnerable to Heap-based Buffer Overflow

WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator…

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.