Most recent entries from all

ALSA-2023:0958 — Moderate: vim security update

Affected: AlmaLinux:9: vim-X11, AlmaLinux:9: vim-common, AlmaLinux:9: vim-enhanced, AlmaLinux:9: vim-filesystem, AlmaLinux:9: vim-minimal

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: no check if the return value of XChangeGC() is NULL (CVE-2022-47024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-00450

BELL-CVE-2022-47024

Affected: Alpaquita:23: vim

EUVD-2026-226908

fkie_cve-2022-47024

A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.

GHSA-5jpw-hxh6-542f

gsd-2022-47024

OESA-2023-1061 — vim security update

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP3: vim, openEuler:22.03-LTS: vim, openEuler:22.03-LTS-SP1: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.(CVE-2023-0288) A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.(CVE-2022-47024)

RHSA-2023:0958 — Red Hat Security Advisory: vim security update

vim: no check if the return value of XChangeGC() is NULL

UBUNTU-CVE-2022-47024

Affected: Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:18.04:LTS: vim, Ubuntu:20.04:LTS: vim, Ubuntu:22.04:LTS: vim

WID-SEC-W-2023-0176 — vim: Schwachstelle ermöglicht Denial of Service

Ein Angreifer kann eine Schwachstelle in vim ausnutzen, um einen Denial of Service Angriff durchzuführen.