OESA-2022-1749

Dashboard / Vulnerabilities / OESA-2022-1749

OESA-2022-1749

Summary: vim security update

Details: Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.(CVE-2022-1720) NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.(CVE-2022-2208) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-2207) Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.(CVE-2022-2183) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.(CVE-2022-2284) Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.(CVE-2022-2285) Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.(CVE-2022-2304) Use After Free in GitHub repository vim/vim prior to 9.0.0046.(CVE-2022-2345) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.(CVE-2022-2344) Use After Free in GitHub repository vim/vim prior to 8.2.(CVE-2022-2042) Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.(CVE-2022-2000)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1749, https://nvd.nist.gov/vuln/detail/CVE-2022-1720, https://nvd.nist.gov/vuln/detail/CVE-2022-2208, https://nvd.nist.gov/vuln/detail/CVE-2022-2207, https://nvd.nist.gov/vuln/detail/CVE-2022-2183, https://nvd.nist.gov/vuln/detail/CVE-2022-2284, https://nvd.nist.gov/vuln/detail/CVE-2022-2285, https://nvd.nist.gov/vuln/detail/CVE-2022-2304, https://nvd.nist.gov/vuln/detail/CVE-2022-2345, https://nvd.nist.gov/vuln/detail/CVE-2022-2344, https://nvd.nist.gov/vuln/detail/CVE-2022-2042, https://nvd.nist.gov/vuln/detail/CVE-2022-2000