MGASA-2022-0203
Dashboard / Vulnerabilities / MGASA-2022-0203
MGASA-2022-0203
Summary: Updated vim packages fix security vulnerability
Details: vim is vulnerable to out of bounds read (CVE-2022-0213) Heap-based Buffer Overflow in block_insert() in src/ops.c (CVE-2022-0261) a heap-based OOB read of size 1 (CVE-2022-0128) heap-based buffer overflow in utf_head_off() in mbyte.c (CVE-2022-0318) access of memory location before start of buffer (CVE-2022-0351) heap-based buffer overflow in init_ccline() in ex_getln.c (CVE-2022-0359) Stack-based Buffer Overflow in spellsuggest.c (CVE-2022-0408) use after free in src/ex_cmds.c (CVE-2022-0413) out-of-bounds read in delete_buff_tail() in getchar.c (CVE-2022-0393) heap-based-buffer-overflow in ex_retab() of src/indent.c (CVE-2022-0417) heap-use-after-free in enter_buffer() of src/buffer.c (CVE-2022-0443) heap overflow in ex_retab() may lead to crash (CVE-2022-0572) Stack-based Buffer Overflow in vim prior to 8.2. (CVE-2022-0629) NULL Pointer Dereference in vim prior to 8.2 (CVE-2022-0696) buffer overflow (CVE-2022-0714) Use of Out-of-range Pointer Offset (CVE-2022-0729) Use of Out-of-range Pointer Offset in vim (CVE-2022-0685) Use of Out-of-range Pointer Offset in vim (CVE-2022-0554) Heap-based Buffer Overflow occurs in vim (CVE-2022-0943) heap buffer overflow in get_one_sourceline (CVE-2022-1160) use after free in utf_ptr2char (CVE-2022-1154) global heap buffer overflow in skip_range (CVE-2022-1381) Out-of-range Pointer Offset (CVE-2022-1420) heap-buffer-overflow in append_command of src/ex_docmd.c (CVE-2022-1616) heap-buffer-overflow in cmdline_erase_chars of ex_getln.c (CVE-2022-1619) NULL Pointer Dereference in vim_regexec_string() of regexp.c (CVE-2022-1620) heap buffer overflow (CVE-2022-1621) buffer over-read (CVE-2022-1629) NULL pointer dereference in vim_regexec_string() of regexp.c (CVE-2022-1674) a buffer over-read found in scriptfile.c (CVE-2022-1769) Heap-based Buffer Overflow in cindent.c (CVE-2022-1733)
References: https://advisories.mageia.org/MGASA-2022-0203.html, https://bugs.mageia.org/show_bug.cgi?id=29972, https://lists.fedoraproject.org/archives/list/[email protected]/thread/7JBXG3MU6EZWJGJD6UTHHONHGJBYPQQT/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/UCWG5L6CRQWACGVP7CYGESUB3G6QJ3GS/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/UFXFAILMLUIK4MBUEZO4HNBNKYZRJ5AP/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/4GOY5YWTP5QUY2EFLCL7AUWA2CV57C37/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/UURGABNDL77YR5FRQKTFBYNBDQX2KO7Q/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/HBUYQBZ6GWAWJRWP7AODJ4KHW5BCKDVP/, https://lists.opensuse.org/archives/list/[email protected]/thread/FDNZ3N5S7UGKPUUKPGOQQGPJJK3YTW37/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/C3R36VSLO4TRX72SWB6IDJOD24BQXPX2/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/, https://www.debian.org/lts/security/2022/dla-3011, https://bugzilla.redhat.com/show_bug.cgi?id=2083924, https://lists.fedoraproject.org/archives/list/[email protected]/thread/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS/, https://lists.fedoraproject.org/archives/list/[email protected]/thread/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/
Affected packages
Package
Name: vim
Purl: pkg:rpm/mageia/vim?arch=source&distro=mageia-8
Affected ranges
Type: ECOSYSTEM
Events:
