ELSA-2022-5242

Опубликовано: 30 июн. 2022

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2022-5242: vim security update (MODERATE)

[8.2.2637-16.0.1]

- Remove upstream references [Orabug: 31197557]

[2:8.2.2637-16.2]

CVE-2022-1621 vim: heap buffer overflow
CVE-2022-1629 vim: buffer over-read

[2:8.2.2637-16.1]

CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim
CVE-2022-1154 vim: use after free in utf_ptr2char
CVE-2022-1420 vim: Out-of-range Pointer Offset

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

vim-X11

8.2.2637-16.0.1.el9_0.2

vim-common

8.2.2637-16.0.1.el9_0.2

vim-enhanced

8.2.2637-16.0.1.el9_0.2

vim-filesystem

8.2.2637-16.0.1.el9_0.2

vim-minimal

8.2.2637-16.0.1.el9_0.2

Oracle Linux x86_64

vim-X11

8.2.2637-16.0.1.el9_0.2

vim-common

8.2.2637-16.0.1.el9_0.2

vim-enhanced

8.2.2637-16.0.1.el9_0.2

vim-filesystem

8.2.2637-16.0.1.el9_0.2

vim-minimal

8.2.2637-16.0.1.el9_0.2

Связанные CVE

Ссылки на источники

Связанные уязвимости

RLSA-2022:5319

rocky

почти 3 года назад

Moderate: vim security update

ELSA-2022-5319

oracle-oval

почти 3 года назад

ELSA-2022-5319: vim security update (MODERATE)

CVE-2022-1621

CVSS3: 7.8

ubuntu

около 3 лет назад

Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

CVE-2022-1621

CVSS3: 7.3

redhat

около 3 лет назад

CVE-2022-1621

CVSS3: 7.8

nvd

около 3 лет назад