Skip to content
OpenAdvisories
High ALAS2023-2023-098 121 CVEs

Important: vim security update (Amazon Linux 2023)

Published Feb 17, 2023 · Updated Feb 15, 2024

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-0049: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2022-4292: Use After Free in GitHub repository vim/vim prior to 9.0.0882. CVE-2022-4141: The target's backtrace indicates that libc has detected a heap error or that the target was executing a heap function when it stopped. This could be due to heap corruption, passing a bad pointer to a heap function such as free(), etc. Since heap errors might include buffer overflows, use-after-free situations, etc. they are generally considered exploitable. CVE-2022-3705: A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324. CVE-2022-3591: Use After Free in GitHub repository vim/vim prior to 9.0.0789. CVE-2022-3520: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3153: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. CVE-2022-3134: A heap use-after-free vulnerability was found in vim's do_tag() function of the src/tag.c file. The issue triggers when the 'tagfunc' closes the window. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory. CVE-2022-3099: A use-after-free vulnerability was found in vim's do_cmdline() function of the src/ex_docmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering use-after-free that causes an application to crash, possibly executing code and corrupting memory. CVE-2022-3037: Use After Free in GitHub repository vim/vim prior to 9.0.0322. CVE-2022-3016: A heap use-after-free vulnerability was found in vim's get_next_valid_entry() function of the src/quickfix.c file. The issue occurs because vim is using freed memory when the location list is changed in autocmd. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory. CVE-2022-2982: A heap use-after-free vulnerability was found in vim's qf_fill_buffer() function of the src/quickfix.c file. The issue occurs because vim uses freed memory when recursively using 'quickfixtextfunc.' This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory. CVE-2022-2980: A NULL pointer dereference vulnerability was found in vim's do_mouse() function of the src/mouse.c file. The issue occurs with a mouse click when it is not initialized. This flaw allows an attacker to trick a user into opening a specially crafted input file, triggering the vulnerability that could cause an application to crash. CVE-2022-2946: A flaw was found in vim, where it is vulnerable to a use-after-free in the vim_vsnprintf_typval function. This flaw allows a specially crafted file to crash a program, use unexpected values, or execute code. CVE-2022-2923: A flaw was found in vim, where it is vulnerable to a NULL pointer dereference in the sug_filltree function. This flaw allows a specially crafted file to crash the software. CVE-2022-2889: A use-after-free vulnerability was found in Vim in the find_var_also_in_script function in the evalvars.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the use-after-free, causing the application to crash, possibly executing code and corrupting memory. CVE-2022-2874: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. CVE-2022-2862: Use After Free in GitHub repository vim/vim prior to 9.0.0221. CVE-2022-2849: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. CVE-2022-2845: Buffer Over-read in GitHub repository vim/vim prior to 9.0.0218. CVE-2022-2819: A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-2817: A use-after-free vulnerability was found in Vim in the string_quote function in the strings.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the use-after-free, causing the application to crash, possibly executing code and corrupting memory. CVE-2022-2816: An out-of-bounds read vulnerability was found in Vim in the check_vim9_unlet function in the vim9cmds.c file. This issue occurs because of invalid memory access when compiling the unlet command when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the out-of-bounds read, causing the application to crash, possibly executing code and corrupting memory. CVE-2022-2598: A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-2581: A flaw was found in vim.

Fixed packages 11

ReleasePackageFixed in
Amazon Linux · 2023 vim-common 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-common-debuginfo 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-data 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-debuginfo 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-debugsource 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-default-editor 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-enhanced 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-enhanced-debuginfo 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-filesystem 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-minimal 2:9.0.1160-1.amzn2023.0.2
Amazon Linux · 2023 vim-minimal-debuginfo 2:9.0.1160-1.amzn2023.0.2

Vulnerabilities 121

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3770.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3903.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3927.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3928.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3968.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3973.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3974.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3984.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4019.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4069.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4136.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4166.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4173.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4187.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4192.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4193.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0128.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0156.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0158.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0213.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0261.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0318.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0319.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0351.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0359.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0361.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0368.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0392.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0393.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0407.html