Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2231: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2. CVE-2022-2210: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. CVE-2022-2208: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. CVE-2022-2207: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-2206: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. CVE-2022-2183: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. CVE-2022-2182: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-2175: A heap buffer over-read vulnerability was found in Vim's put_on_cmdline() function of the src/ex_getln.c file. This issue occurs due to invalid memory access when using an expression on the command line. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer overflow that causes an application to crash and corrupt memory. CVE-2022-2129: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. CVE-2022-2126: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. CVE-2022-2125: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-2124: Buffer Over-read in GitHub repository vim/vim prior to 8.2. CVE-2022-2042: A heap use-after-free vulnerability was found in Vim's skipwhite() function of the src/charset.c file. This flaw occurs because of an uninitialized attribute value and freed memory in the spell command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash and corrupt memory. CVE-2022-2000: An out-of-bounds write vulnerability was found in Vim's append_command() function of the src/ex_docmd.c file. This issue occurs when an error for a command goes over the end of IObuff. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer overflow that causes an application to crash and corrupt memory. CVE-2022-1968: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a use-after-free vulnerability in the utf_ptr2char function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-1942: An out-of-bounds write vulnerability was found in Vim's vim_regsub_both() function in the src/regexp.c file. The flaw can open a command-line window from a substitute expression when a text or buffer is locked. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering an out-of-bounds write that causes an application to crash, possibly reading and modifying some amount of memory contents. CVE-2022-1927: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a buffer over-read vulnerability in the utf_ptr2char function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-1898: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a use-after-free vulnerability in the find_pattern_in_path function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-1897: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the vim_regsub_both function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-1886: A heap buffer overflow flaw was found in Vim's utf_head_off() function in the mbyte.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer overflow that causes an application to crash, leading to a denial of service and possibly some amount of memory leak. CVE-2022-1851: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds read vulnerability in the gchar_cursor function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-1796: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a use after free vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-1785: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the ex_cmds function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-1771: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a stack-based buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-1769: Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974. CVE-2022-1735: Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969. CVE-2022-1733: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968. CVE-2022-1725: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.495 CVE-2022-1720: A heap buffer over-read vulnerability was found in Vim's grab_file_name() function of the src/findfile.c file. This flaw occurs because the function reads after the NULL terminates the line with "gf" in Visual block mode. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer over-read vulnerability that causes an application to crash and corrupt memory. CVE-2022-1674: A NULL pointer dereference flaw was found in vim's vim_regexec_string() function in regexp.c file. The issue occurs when the function tries to match the buffer wit
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | vim-common | 2:8.2.5172-1.amzn2.0.1 |
| Amazon Linux · 2 | vim-data | 2:8.2.5172-1.amzn2.0.1 |
| Amazon Linux · 2 | vim-debuginfo | 2:8.2.5172-1.amzn2.0.1 |
| Amazon Linux · 2 | vim-enhanced | 2:8.2.5172-1.amzn2.0.1 |
| Amazon Linux · 2 | vim-filesystem | 2:8.2.5172-1.amzn2.0.1 |
| Amazon Linux · 2 | vim-minimal | 2:8.2.5172-1.amzn2.0.1 |
| Amazon Linux · 2 | vim-X11 | 2:8.2.5172-1.amzn2.0.1 |
Vulnerabilities 35
-
High 7.8
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
High 7.8
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.
-
High 7.8
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
-
High 7.8
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.
-
High 7.4
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.
-
High 7.3
Use after free in append_command in vim/vim
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
-
High 7.3
Heap buffer overflow in vim_strncpy find_word in vim/vim
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
-
High 7.3
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.
-
High 7.1
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
-
Medium 6.6
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash)…
-
Medium 6.6
Buffer Over-read in function find_next_quote in vim/vim
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
-
Medium 6.6
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash)…
-
Medium 6.6
Buffer Over-read in function grab_file_name in vim/vim
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
-
Medium 6.6
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.
-
Medium 6.6
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.
-
Medium 6.6
Classic Buffer Overflow in vim/vim
Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.
-
Medium 6.6
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
-
Medium 6.6
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.4979.
-
Medium 6.1
Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
-
Medium 5.5
Uncontrolled Recursion in vim/vim
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1616.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1619.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1620.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1621.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1629.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1674.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1720.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1725.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1733.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1735.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1769.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1771.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1785.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1796.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1851.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1886.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1897.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1898.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1927.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1942.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-1968.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2000.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2042.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2124.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2125.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2126.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2129.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2175.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2182.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-2183.html