Most recent entries from all

ALSA-2022:0366 — Moderate: vim security update

Affected: AlmaLinux:8: vim-X11, AlmaLinux:8: vim-common, AlmaLinux:8: vim-enhanced, AlmaLinux:8: vim-filesystem, AlmaLinux:8: vim-minimal

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: heap-based buffer overflow in win_redr_status() in drawscreen.c (CVE-2021-3872)

* vim: illegal memory access in find_start_brace() in cindent.c when C-indenting (CVE-2021-3984)

* vim: heap-based buffer overflow in find_help_tags() in help.c (CVE-2021-4019)

* vim: use-after-free in win_linetabsize() (CVE-2021-4192)

* vim: out-of-bound read in getvcol() (CVE-2021-4193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-00980

Withdrawn: BELL-CVE-2021-4192 — CVE-2021-4192 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2022-avi-243 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu…

certfr-2022-avi-243

EUVD-2026-21324

fkie_cve-2021-4192

vim is vulnerable to Use After Free

GHSA-pg7r-g97x-9qxx

vim is vulnerable to Use After Free

gsd-2021-4192

msrc_CVE-2021-4192 — Use After Free in vim/vim

msrc_CVE-2021-4192

OESA-2022-1500 — vim security update

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP2: vim, openEuler:20.03-LTS-SP3: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es):

vim is vulnerable to Out-of-bounds Read.(CVE-2021-4166) vim is vulnerable to Out-of-bounds Read.(CVE-2021-4193) vim is vulnerable to Use After Free.(CVE-2021-4192)

RHSA-2022:0366 — Red Hat Security Advisory: vim security update

vim: heap-based buffer overflow in win_redr_status() in drawscreen.c vim: illegal memory access in find_start_brace() in cindent.c when C-indenting vim: heap-based buffer overflow in find_help_tags() in help.c vim: use-after-free in win_linetabsize() vim: out-of-bound read in getvcol()

SUSE-SU-2022:4619-1 — Security update for vim

Security update for vim

UBUNTU-CVE-2021-4192

Affected: Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:18.04:LTS: vim, Ubuntu:20.04:LTS: vim

vim is vulnerable to Use After Free

WID-SEC-W-2022-0048 — vim: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vim ausnutzen, um Informationen offenzulegen.