OESA-2022-1514

Dashboard / Vulnerabilities / OESA-2022-1514

OESA-2022-1514

Summary: vim security update

Details: Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0261) Heap-based Buffer Overflow in vim/vim prior to 8.2.(CVE-2022-0318) Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.(CVE-2022-0351) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0359) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0361) Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.(CVE-2022-0368) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0392) Use After Free in GitHub repository vim/vim prior to 8.2.(CVE-2022-0413) Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0408) Use After Free in Conda vim prior to 8.2.(CVE-2022-0443) Heap-based Buffer Overflow in Conda vim prior to 8.2.(CVE-2022-0417) vim is vulnerable to Heap-based Buffer Overflow(CVE-2022-0213)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1514, https://nvd.nist.gov/vuln/detail/CVE-2022-0261, https://nvd.nist.gov/vuln/detail/CVE-2022-0318, https://nvd.nist.gov/vuln/detail/CVE-2022-0351, https://nvd.nist.gov/vuln/detail/CVE-2022-0359, https://nvd.nist.gov/vuln/detail/CVE-2022-0361, https://nvd.nist.gov/vuln/detail/CVE-2022-0368, https://nvd.nist.gov/vuln/detail/CVE-2022-0392, https://nvd.nist.gov/vuln/detail/CVE-2022-0413, https://nvd.nist.gov/vuln/detail/CVE-2022-0408, https://nvd.nist.gov/vuln/detail/CVE-2022-0443, https://nvd.nist.gov/vuln/detail/CVE-2022-0417, https://nvd.nist.gov/vuln/detail/CVE-2022-0213