Summary
It was discovered that Vim incorrectly handled certain sources.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and
Ubuntu 16.04 LTS (CVE-2017-11109)
It was discovered that Vim incorrectly handled certain files.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
(CVE-2017-5953)
It was discovered that Vim incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 16.06 LTS. (CVE-2018-20786)
It was discovered that Vim incorrectly handled certain inputs. An attacker
could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and
Ubuntu 19.10. (CVE-2019-20079)
It was discovered that Vim incorrectly handled certain files. An attacker
could possibly use this issue to execute arbitrary code. This issue
only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS.
(CVE-2017-6349, CVE-2017-6350)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | vim | 2:7.4.1689-3ubuntu1.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | vim | 2:8.0.1453-1ubuntu1.3 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | vim | 2:7.4.052-1ubuntu3.1+esm1 |
Vulnerabilities 6
-
Unscored —
Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a cr…
-
Unscored —
vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may resul…
-
Unscored —
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not p…
-
Unscored —
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does …
-
Unscored —
libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a…
-
Unscored —
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.