Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-common | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-common-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-debugsource | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-enhanced | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-enhanced-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-minimal-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-X11 | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | vim-X11-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim-common-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim-debugsource | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim-enhanced-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim-filesystem | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim-minimal | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim-minimal-debuginfo | 2:8.2.2637-16.el9_0.2 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | vim-X11-debuginfo | 2:8.2.2637-16.el9_0.2 |
Vulnerabilities 6
-
High 8.4
Use of Out-of-range Pointer Offset in vim/vim
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
-
High 8.4
Heap-based Buffer Overflow occurs in vim in vim/vim
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.
-
High 7.8
Use after free in utf_ptr2char in vim/vim
Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.
-
High 7.3
Heap buffer overflow in vim_strncpy find_word in vim/vim
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
-
Medium 6.8
Use of Out-of-range Pointer Offset in vim/vim
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
-
Medium 6.6
Buffer Over-read in function find_next_quote in vim/vim
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2058483
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2064064
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073013
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2077734
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2083924
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2083931
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5242.json
-
report
https://access.redhat.com/security/cve/CVE-2022-0554
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-0554
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0554
-
report
https://access.redhat.com/security/cve/CVE-2022-0943
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-0943
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0943
-
report
https://access.redhat.com/security/cve/CVE-2022-1154
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-1154
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-1154
-
report
https://access.redhat.com/security/cve/CVE-2022-1420
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-1420
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-1420
-
report
https://access.redhat.com/security/cve/CVE-2022-1621
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-1621
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-1621
-
article
https://huntr.dev/bounties/520ce714-bfd2-4646-9458-f52cd22bb2fb
-
report
https://access.redhat.com/security/cve/CVE-2022-1629
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-1629
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-1629
-
article
https://huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee