[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256040

 
 

909

 
 

199103

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2022-1567 --- vim

ID: oval:org.secpod.oval:def:1601515Date: (C)2022-02-22   (M)2024-05-22
Class: PATCHFamily: unix




It was found that vim was vulnerable to use-after-free flaw in the way it was treating allocated lines in user functions. A specially crafted file could crash the vim process or possibly lead to other undefined behaviors. It was found that vim was vulnerable to a 1 byte heap based out of bounds read flaw in the `compile_get_env` function. A file could use that flaw to disclose 1 byte of vim's internal memory. A flaw was found in vim. The vulnerability occurs due to not checking the length for the NameBuff function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. A heap based out-of-bounds write flaw was found in vim's ops.c. This flaw allows an attacker to trick a user to open a crafted file triggering an out-of-bounds write. This vulnerability is capable of crashing software, modify memory, and possible code execution. A flaw was found in vim. The vulnerability occurs due to reading beyond the end of a line in the utf_head_off function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. A flaw was found in vim. The vulnerability occurs due to too many recursions, which can lead to a segmentation fault. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. A flaw was found in vim. The vulnerability occurs due to Illegal memory access with large tabstop in Ex mode, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution

Platform:
Amazon Linux AMI
Product:
vim
Reference:
ALAS-2022-1567
CVE-2022-0156
CVE-2022-0158
CVE-2022-0213
CVE-2022-0261
CVE-2022-0318
CVE-2022-0351
CVE-2022-0359
CVE-2021-3872
CVE-2021-3778
CVE-2021-3875
CVE    10
CVE-2021-3778
CVE-2021-3872
CVE-2021-3875
CVE-2022-0156
...
CPE    2
cpe:/a:vim:vim
cpe:/o:amazon:linux

© SecPod Technologies