rpm package
suse/vim&distro=SUSE Linux Enterprise Server 12 SP5
pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5
Vulnerabilities (144)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-4193 | Med | 5.5 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Dec 31, 2021 | vim is vulnerable to Out-of-bounds Read | |
| CVE-2021-4192 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Dec 31, 2021 | vim is vulnerable to Use After Free | |
| CVE-2021-4166 | Hig | 7.1 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Dec 25, 2021 | vim is vulnerable to Out-of-bounds Read | |
| CVE-2021-4136 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Dec 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-4069 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Dec 6, 2021 | vim is vulnerable to Use After Free | |
| CVE-2021-3984 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Dec 1, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-4019 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Dec 1, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-3973 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Nov 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-3968 | Hig | 8.0 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Nov 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-3974 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Nov 19, 2021 | vim is vulnerable to Use After Free | |
| CVE-2021-3928 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Nov 5, 2021 | vim is vulnerable to Use of Uninitialized Variable | |
| CVE-2021-3927 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Nov 5, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-3903 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Oct 27, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-3872 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Oct 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-3875 | Med | 5.5 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Oct 15, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2021-3796 | Hig | 7.3 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Sep 15, 2021 | vim is vulnerable to Use After Free | |
| CVE-2021-3778 | Hig | 7.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Sep 15, 2021 | vim is vulnerable to Heap-based Buffer Overflow | |
| CVE-2019-20807 | Med | 5.3 | < 7.4.326-17.6.1 | 7.4.326-17.6.1 | May 28, 2020 | In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua). | |
| CVE-2017-17087 | Med | 5.5 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Dec 1, 2017 | fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, a | |
| CVE-2017-6350 | Cri | 9.8 | < 9.0.0814-17.9.1 | 9.0.0814-17.9.1 | Feb 27, 2017 | An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows. |
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Out-of-bounds Read
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Use After Free
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Out-of-bounds Read
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Use After Free
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Use After Free
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Use of Uninitialized Variable
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Use After Free
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
vim is vulnerable to Heap-based Buffer Overflow
- affected < 7.4.326-17.6.1fixed 7.4.326-17.6.1
In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, a
- affected < 9.0.0814-17.9.1fixed 9.0.0814-17.9.1
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
Page 7 of 8