Advisories ยป MGASA-2022-0203

Updated vim packages fix security vulnerability

Publication date: 25 May 2022
Modification date: 25 May 2022
Type: security
Affected Mageia releases : 8
CVE: CVE-2022-0213 , CVE-2022-0261 , CVE-2022-0128 , CVE-2022-0318 , CVE-2022-0351 , CVE-2022-0359 , CVE-2022-0408 , CVE-2022-0413 , CVE-2022-0393 , CVE-2022-0417 , CVE-2022-0443 , CVE-2022-0572 , CVE-2022-0629 , CVE-2022-0696 , CVE-2022-0714 , CVE-2022-0729 , CVE-2022-0685 , CVE-2022-0554 , CVE-2022-0943 , CVE-2022-1160 , CVE-2022-1154 , CVE-2022-1381 , CVE-2022-1420 , CVE-2022-1616 , CVE-2022-1619 , CVE-2022-1620 , CVE-2022-1621 , CVE-2022-1629 , CVE-2022-1674 , CVE-2022-1769 , CVE-2022-1733

Description

vim is vulnerable to out of bounds read (CVE-2022-0213)
Heap-based Buffer Overflow in block_insert() in src/ops.c (CVE-2022-0261)
a heap-based OOB read of size 1 (CVE-2022-0128)
heap-based buffer overflow in utf_head_off() in mbyte.c (CVE-2022-0318)
access of memory location before start of buffer (CVE-2022-0351)
heap-based buffer overflow in init_ccline() in ex_getln.c (CVE-2022-0359)
Stack-based Buffer Overflow in spellsuggest.c (CVE-2022-0408)
use after free in src/ex_cmds.c (CVE-2022-0413)
out-of-bounds read in delete_buff_tail() in getchar.c (CVE-2022-0393)
heap-based-buffer-overflow in ex_retab() of src/indent.c (CVE-2022-0417)
heap-use-after-free in enter_buffer() of src/buffer.c (CVE-2022-0443)
heap overflow in ex_retab() may lead to crash (CVE-2022-0572)
Stack-based Buffer Overflow in vim prior to 8.2. (CVE-2022-0629)
NULL Pointer Dereference in vim prior to 8.2 (CVE-2022-0696)
buffer overflow (CVE-2022-0714)
Use of Out-of-range Pointer Offset (CVE-2022-0729)
Use of Out-of-range Pointer Offset in vim (CVE-2022-0685)
Use of Out-of-range Pointer Offset in vim (CVE-2022-0554)
Heap-based Buffer Overflow occurs in vim (CVE-2022-0943)
heap buffer overflow in get_one_sourceline (CVE-2022-1160)
use after free in utf_ptr2char (CVE-2022-1154)
global heap buffer overflow in skip_range (CVE-2022-1381)
Out-of-range Pointer Offset (CVE-2022-1420)
heap-buffer-overflow in append_command of src/ex_docmd.c (CVE-2022-1616)
heap-buffer-overflow in cmdline_erase_chars of ex_getln.c (CVE-2022-1619)
NULL Pointer Dereference in vim_regexec_string() of regexp.c (CVE-2022-1620)
heap buffer overflow (CVE-2022-1621)
buffer over-read (CVE-2022-1629)
NULL pointer dereference in vim_regexec_string() of regexp.c (CVE-2022-1674)
a buffer over-read found in scriptfile.c (CVE-2022-1769)
Heap-based Buffer Overflow in cindent.c (CVE-2022-1733)

References

SRPMS

8/core