Red Hat Security AdvisoryRHSA-2022:5242
vim security update
Released 2022-07-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) vim-X11-2:8.2.2637-16.el9_0.2, vim-common-2:8.2.2637-16.el9_0.2, vim-enhanced-2:8.2.2637-16.el9_0.2
- Red Hat Enterprise Linux BaseOS (v. 9) vim-2:8.2.2637-16.el9_0.2, vim-filesystem-2:8.2.2637-16.el9_0.2, vim-minimal-2:8.2.2637-16.el9_0.2
Fixes 6 records
Priority LOW 39
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02381 · Published 2022-05-09 · Partial fix · 8.2.4919 CWE-122
Priority LOW 38
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01911 · Published 2022-05-10 · Partial fix · 8.2.4925 CWE-126
Priority LOW 37
Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01462 · Published 2022-03-30 · Partial fix · 8.2.4646 CWE-416
Priority LOW 37
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01667 · Published 2022-02-10 · Fixed in 8.2 CWE-823
Priority LOW 35
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00698 · Published 2022-03-14 · Fixed in 8.2.4563 CWE-122
Priority LOW 28
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01454 · Published 2022-04-21 · Fixed in 8.2.4774 CWE-823