It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-155 advisory.

    A use-after-free vulnerability was found in vim's do_cmdline() function of the src/ex_docmd.c file. The     issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker to trick a     user into opening a specially crafted file, triggering use-after-free that causes an application to crash,     possibly executing code and corrupting memory. (CVE-2022-3099)

    A heap use-after-free vulnerability was found in vim's do_tag() function of the src/tag.c file. The issue     triggers when the 'tagfunc' closes the window. This flaw allows an attacker to trick a user into opening a     specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly     executing code and corrupting memory. (CVE-2022-3134)

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. (CVE-2022-3153)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

したがって、ALAS-2022-1567のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - vim はヒープベースのバッファオーバーフローに対して脆弱です (CVE-2021-3778, CVE-2021-3872, CVE-2021-3875, CVE-2022-0158, CVE-2022-0213)

  - vim はメモリ解放後使用（Use After Free）に対して脆弱です（CVE-2022-0156）

  - 8.2より前の GitHub リポジトリ vim/vim におけるヒープベースのバッファオーバーフロー。(CVE-2022-0261、CVE-2022-0359)

  - 8.2より前の vim/vim におけるヒープベースのバッファオーバーフロー。(CVE-2022-0318)

  - 8.2より前の GitHub リポジトリ vim/vim におけるバッファ開始前のメモリ位置のアクセス。
    (CVE-2022-0351)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS ホストには、USN-6026-1 のアドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - vim は領域外読み取りに対して脆弱です (CVE-2021-4166、CVE-2021-4193)

  - vim はメモリ解放後使用 (Use After Free) に対して脆弱です (CVE-2021-4192)

  - vim はヒープベースのバッファオーバーフローに対して脆弱です (CVE-2022-0213)

  - 8.2より前の GitHub リポジトリ vim/vim におけるヒープベースのバッファオーバーフロー。(CVE-2022-0261、CVE-2022-0359、CVE-2022-0361、CVE-2022-0572、CVE-2022-2207)

  - 8.2より前の vim/vim におけるヒープベースのバッファオーバーフロー。(CVE-2022-0318)

  - 8.2より前の vim/vim の領域外読み取り。(CVE-2022-0319)

  - 8.2より前の GitHub リポジトリ vim/vim におけるバッファ開始前のメモリ位置のアクセス。
    (CVE-2022-0351)

  - 8.2より前の GitHub リポジトリ vim/vim における領域外読み取り。(CVE-2022-0368)

  - 8.2 より前の GitHub リポジトリ vim/vim におけるスタックベースのバッファオーバーフロー。(CVE-2022-0408、CVE-2022-0629)

  - 8.2より前の GitHub リポジトリ vim/vim でのメモリ解放後使用 (Use-After-Free)。(CVE-2022-0443)

  - 8.2より前の GitHub リポジトリ vim/vim の範囲外のポインターオフセットの使用。(CVE-2022-0554)

  - 8.2.4418より前の GitHub リポジトリ vim/vim の範囲外のポインターオフセットの使用。(CVE-2022-0685)

  - 8.2.4436 より前の GitHub リポジトリ vim/vim におけるヒープベースのバッファオーバーフロー。(CVE-2022-0714)

  - 8.2.4440より前の GitHub リポジトリ vim/vim の範囲外のポインターオフセットの使用。(CVE-2022-0729)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートの Debian 10 ホストには、dla-3182 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - vim はヒープベースのバッファオーバーフローに対して脆弱です (CVE-2021-3927、CVE-2021-3984、CVE-2021-4019、CVE-2022-0213)

  - vim は初期化されていない変数の使用に対して脆弱です (CVE-2021-3928)

  - vim はメモリ解放後使用 (Use After Free) に対して脆弱です (CVE-2021-3974, CVE-2021-4069, CVE-2021-4192)

  - vim は領域外読み取りに対して脆弱です (CVE-2021-4193)

  - 8.2より前の GitHub リポジトリ vim/vim におけるヒープベースのバッファオーバーフロー。(CVE-2022-0261、CVE-2022-0359、CVE-2022-0361、CVE-2022-0572)

  - 8.2より前の vim/vim の領域外読み取り。(CVE-2022-0319)

  - 8.2より前の GitHub リポジトリ vim/vim におけるバッファ開始前のメモリ位置のアクセス。
    (CVE-2022-0351)

  - 8.2より前の GitHub リポジトリ vim/vim における領域外読み取り。(CVE-2022-0368、CVE-2022-1851)

  - 8.2より前の GitHub リポジトリ vim/vim におけるスタックベースのバッファオーバーフロー。(CVE-2022-0408)

  - 8.2より前の GitHub リポジトリ vim/vim でのメモリ解放後使用 (Use After Free)。(CVE-2022-0413、CVE-2022-0443、CVE-2022-1898、CVE-2022-1968)

  - 8.2 より前の GitHub リポジトリ vim/vim のヒープベースのバッファオーバーフロー。(CVE-2022-0417)

  - 8.2より前の GitHub リポジトリ vim/vim の範囲外のポインターオフセットの使用。(CVE-2022-0554)

  - 8.2.4418より前の GitHub リポジトリ vim/vim の範囲外のポインターオフセットの使用。(CVE-2022-0685)

  - 8.2.4436 より前の GitHub リポジトリ vim/vim におけるヒープベースのバッファオーバーフロー。(CVE-2022-0714)

  - 8.2.4440 より前の GitHub リポジトリ vim/vim の範囲外のポインターオフセットの使用。(CVE-2022-0729)

  - 8.2.4563 より前の GitHub リポジトリ vim/vim における vim でヒープベースのバッファオーバーフローが発生します。(CVE-2022-0943)

  - 8.2.4646より前の GitHub リポジトリの vim/vim の utf_ptr2char のメモリ解放後使用 (Use-After-Free)。(CVE-2022-1154)

  - 8.2.4895 より前の GitHub リポジトリ vim/vim の append_command のメモリ解放後使用 (Use-After-Free)。この脆弱性は、ソフトウェアのクラッシュ、保護メカニズムのバイパス、メモリの変更、リモート実行の可能性があります (CVE-2022-1616)

  - 8.2.4956 より前の GitHub リポジトリ vim/vim における関数 grab_file_name のバッファオーバーリード。この脆弱性はソフトウェアのクラッシュ、メモリ改ざん、リモート実行の可能性があります。
    (CVE-2022-1720)

  - 9.0 より前の GitHub リポジトリ vim/vim における整数オーバーフローまたはラップアラウンド。(CVE-2022-2285)

  - 9.0より前の GitHub リポジトリ vim/vim におけるスタックベースのバッファオーバーフロー。(CVE-2022-2304)

  - 9.0.0100 より前の GitHub リポジトリ vim/vim における API への入力の未定義の動作。(CVE-2022-2598)

  - 9.0.0246より前の GitHub リポジトリ vim/vim でのメモリ解放後使用 (Use-After-Free)。(CVE-2022-2946)

  - 9.0.0360 より前の GitHub リポジトリ vim/vim でのメモリ解放後使用 (Use-After-Free)。(CVE-2022-3099)

  - 9.0.0389より前の GitHub リポジトリ vim/vim でのメモリ解放後使用 (Use-After-Free)。(CVE-2022-3134)

  - 9.0.0483 より前の GitHub リポジトリ vim/vim におけるヒープベースのバッファオーバーフロー。(CVE-2022-3234)

  - 9.0.0598より前の GitHub リポジトリ vim/vim におけるスタックベースのバッファオーバーフロー。(CVE-2022-3324)

  - vim で脆弱性が見つかり、問題として分類されました。この問題の影響を受けるのは、コンポーネント autocmd ハンドラーの quickfix.c ファイルの関数 qf_update_buffer です。この操作により、メモリ解放後使用 (Use After Free) が発生します。攻撃がリモートで起動される可能性があります。バージョン 9.0.0805 にアップグレードすると、この問題に対処できます。パッチの名前は、d0fab10ed2a86698937e3c3fed2f10bd9bb5e731 です。影響を受けるコンポーネントをアップグレードすることが推奨されます。この脆弱性の識別子は VDB-212324 です。(CVE-2022-3705)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートの SUSE Linux SLES12 / SLES_SAP12 ホストには、SUSE-SU-2022:4619-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    バージョン 9.0.0814 に更新済み：

      * の修正 bsc#1192478 VUL-1 CVE-2021-3928vimvim はスタックベースのバッファオーバーフローに対して脆弱です
      * の修正 bsc#1203508 VUL-0 CVE-2022-3234vim以前のヒープベースのバッファオーバーフロー 9.0.0483。
      * の修正 bsc#1203509 VUL-1: CVE-2022-3235vim: より前の GitHub における use-after-free 9.0.0490。
      * bsc#1203820 VUL-0 の修正 CVE-2022-3324vim以前の におけるスタックベースのバッファオーバーフロー 9.0.0598。
      * の修正 bsc#1204779 VUL-0 CVE-2022-3705vimファイル quickfix.c の関数 qf_update_buffer における use-after-free
      * bsc#1203152 VUL-1 の修正 CVE-2022-2982vimqf_fill_buffer() の use-after-free
      * bsc#1203796 VUL-1 の修正 CVE-2022-3296vimex_eval.c の ex_finally() におけるスタック領域外読み取り
      * bsc#1203797 VUL-1 の修正 CVE-2022-3297viminsexpand.c の process_next_cpt_value() の use-after-free
      * の修正 bsc#1203110 VUL-1 CVE-2022-3099: vimex_docmd.c の use-after-free
      * bsc#1203194 VUL-1 の修正 CVE-2022-3134vimdo_tag() の use-after-free
      * bsc#1203272 VUL-1 の修正 CVE-2022-3153vim より前の GitHub リポジトリ vim/ 9.0.0404vimの NULL ポインターデリファレンス。
      * bsc#1203799 VUL-1 の修正 CVE-2022-3278vimeval.c の eval_next_non_blank() の NULL ポインターデリファレンス
      * の修正 bsc#1203924 VUL-1 CVE-2022-3352vimvimuse-after-free
      * bsc#1203155 VUL-1 の修正 CVE-2022-2980vimdo_mouse() における NULL ポインターデリファレンス
      * の修正 bsc#1202962 VUL-1: CVE-2022-3037vim より前の vim での use-after-free 9.0.0321
      * の修正 bsc#1200884 Vim起動時のエラー
      * の修正 bsc#1200902 VUL-0 CVE-2022-2183vimget_lisp_indent() を通じた領域外読み取りMon 13:32
      * の修正 bsc#1200903 VUL-0 CVE-2022-2182vimparse_cmd_address() を通じたヒープベースのバッファオーバーフロー火曜日 08:37
      * の修正 bsc#1200904 VUL-0 CVE-2022-2175: vimcmdline_insert_reg() を通じたバッファオーバーリード Tue 08:37
      * bsc#1201249 VUL-0 の修正 CVE-2022-2304vimspell_dump_compl() のスタックバッファオーバーフロー
      * の修正 bsc#1201356 VUL-1 CVE-2022-2343vim より前の GitHub リポジトリ vim におけるヒープベースのバッファオーバーフロー 9.0.0044
      * bsc#1201359 VUL-1 の修正 CVE-2022-2344vim より前の別のヒープベースのバッファオーバーフロー vim 9.0.0045
      * bsc#1201363 VUL-1 の修正 CVE-2022-2345vim以前の GitHub リポジトリ vim における use-after-free 9.0.0046。
      * bsc#1201620 vim の修正SLE-15-SP4-Full-x86_64-GM-Media1 および vim-plugin-tlib-1.27-bp154.2.18.noarchissue
      * の修正 bsc#1202414 VUL-1 CVE-2022-2819vimcompile_lock_unlock() のヒープベースのバッファオーバーフロー
      * bsc#1202552 VUL-1 の修正 CVE-2022-2874vimgenerate_loadvar() の NULL ポインターデリファレンス
      * bsc#1200270 VUL-1 の修正 CVE-2022-1968vimutf_ptr2char の use-after-free
      * bsc#1200697 VUL-1 の修正 CVE-2022-2124vimcurrent_quote() における領域外読み取り
      * bsc#1200698 VUL-1 の修正 CVE-2022-2125vimget_lisp_indent() の領域外読み取り
      * bsc#1200700 VUL-1 の修正 CVE-2022-2126vimproject_trie_walk() の領域外読み取り
      * bsc#1200701 VUL-1 の修正 CVE-2022-2129vimvim_regsub_both() の領域外書き込み
      * の修正 bsc#1200732 VUL-1 CVE-2022-1720vimgrab_file_name() での領域外読み取り
      * の修正 bsc#1201132 VUL-1: CVE-2022-2264viminc() での領域外読み取り
      * bsc#1201133 VUL-1 の修正 CVE-2022-2284vimutfc_ptr2len() の領域外読み取り
      * bsc#1201134 VUL-1 の修正 CVE-2022-2285vim整数オーバーフローにより負のサイズが memmove() に渡されます
      * bsc#1201135 VUL-1 の修正 CVE-2022-2286vimins_bytes() の領域外読み取り
      * bsc#1201136 VUL-1 の修正 CVE-2022-2287vimproject_trie_walk() の領域外読み取り
      * bsc#1201150 VUL-1 の修正 CVE-2022-2231vimnull ポインターデリファレンス skipwhite()
      * bsc#1201151 VUL-1 の修正 CVE-2022-2210vimml_append_int() の領域外読み取り
      * bsc#1201152 VUL-1 の修正 CVE-2022-2208vimdiff_check() の NULL ポインターデリファレンス
      * bsc#1201153 VUL-1 の修正 CVE-2022-2207vimins_bs() の領域外読み取り
      * bsc#1201154 VUL-1 の修正 CVE-2022-2257vimmsg_outtrans_special() の領域外読み取り
      * bsc#1201155 VUL-1 の修正 CVE-2022-2206vimmsg_outtrans_attr() の領域外読み取り
      * 修正 bsc#1201863 VUL-1 CVE-2022-2522vimネスト化されたオートコマンドを通じた領域外読み取り
      * bsc#1202046 VUL-1 の修正 CVE-2022-2571vimins_comp_get_next_word_or_line() に関連するヒープベースのバッファオーバーフロー
      * の修正 bsc#1202049 VUL-1 CVE-2022-2580vimeval_string() に関連するヒープベースのバッファオーバーフロー
      * bsc#1202050 VUL-1 の修正 CVE-2022-2581vim領域外読み取り cstrchr() に関連
      * bsc#1202051 VUL-1 の修正 CVE-2022-2598vimdiff_mark_adjust_tp() および ex_diffgetput() に関連する API 入力の未定義の動作
      * bsc#1202420 VUL-1 の修正 CVE-2022-2817vimf_assert_fails() の use-after-free
      * bsc#1202421 VUL-1 の修正 CVE-2022-2816vimcheck_vim9_unlet() の領域外読み取り
      * の修正 bsc#1202511 VUL-1 CVE-2022-2862vimcompile_nested_function() の use-after-free
      * 修正 bsc#1202512 VUL-1 CVE-2022-2849vimmb_ptr2len() に関連する無効なメモリアクセス
      * bsc#1202515 VUL-1 の修正 CVE-2022-2845vimdisplay_dollar() に関連するバッファオーバーリード
      * bsc#1202599 VUL-1 の修正 CVE-2022-2889vimevals.c の find_var_also_in_script() の use-after-free
      * bsc#1202687 VUL-1 の修正 CVE-2022-2923vim より前の GitHub リポジトリ vim/vim における NULL ポインターデリファレンス 9.0.0240
      * bsc#1202689 VUL-1 の修正 CVE-2022-2946vim関数 vim_vsnprintf_typval の use-after-free
      * bsc#1202862 VUL-1 の修正 CVE-2022-3016vim より前の vim の use-after-free 9.0.0285 Mon 12:00
      * bsc#1191770 VUL-0 の修正 CVE-2021-3875vimヒープベースのバッファオーバーフロー
      * bsc#1192167 VUL-0 の修正 CVE-2021-3903vimヒープベースのバッファオーバーフロー
      * の修正 bsc#1192902 VUL-0 CVE-2021-3968vimvim はヒープベースのバッファオーバーフローに対して脆弱です
      * の修正 bsc#1192903 VUL-0 CVE-2021-3973vimvim はヒープベースのバッファオーバーフローに対して脆弱です
      * の修正 bsc#1192904 VUL-0 CVE-2021-3974vimvim は use-after-free に対して脆弱です
      * bsc#1193466 VUL-1 の修正 CVE-2021-4069vimsrc/ex_docmd.c の ex_open() における use-after-free
      * の修正 bsc#1193905 VUL-0 CVE-2021-4136vimvim はヒープベースのバッファオーバーフローに対して脆弱です
      * の修正 bsc#1194093 VUL-1 CVE-2021-4166vimvim は領域外読み取りに対して脆弱です
      * の修正 bsc#1194216 VUL-1 CVE-2021-4193vim領域外読み取りに対して脆弱です
      * の修正 bsc#1194217 VUL-0 CVE-2021-4192vimuse-after-free に脆弱です
      * bsc#1194872 VUL-0 の修正 CVE-2022-0261vim以前の vim でのヒープベースのバッファオーバーフロー 8.2。
      * の修正 bsc#1194885 VUL-0 CVE-2022-0213vimvim はヒープベースのバッファオーバーフローに対して脆弱です
      * bsc#1195004 VUL-0 の修正 CVE-2022-0318vim以前の vim でのヒープベースのバッファオーバーフロー 8.2。
      * bsc#1195203 VUL-0 の修正 CVE-2022-0359vimex_getln.c の init_ccline() におけるヒープベースのバッファオーバーフロー
      * bsc#1195354 VUL-0 の修正 CVE-2022-0407vim より前の Conda 8.2vimにおけるヒープベースのバッファオーバーフロー。
      * の修正 bsc#1198596 VUL-0 CVE-2022-1381vimskip_range のグローバルヒープバッファオーバーフロー
      * の修正 bsc#1199331 VUL-0 CVE-2022-1616vimappend_command の use-after-free
      * bsc#1199333 VUL-0 の修正 CVE-2022-1619vim関数 cmdline_erase_chars のヒープベースのバッファオーバーフロー
      * bsc#1199334 VUL-0 の修正 CVE-2022-1620vim関数 vim_regexec_string の NULL ポインターデリファレンス
      * bsc#1199747 VUL-0 の修正 CVE-2022-1796vimfind_pattern_in_path の use-after
      * bsc#1200010 VUL-0 の修正 CVE-2022-1897vimvim の領域外書き込み
      * bsc#1200011 VUL-0 の修正 CVE-2022-1898vim より前の vim での use-after-free 8.2
      * bsc#1200012 VUL-0 の修正 CVE-2022-1927vimより前の vim でのバッファオーバーリード 8.2
      * bsc#1070955 VUL-1 の修正 CVE-2017-17087vim.swp ファイルのグループ所有権をエディターのプライマリグループに設定します。これにより、ローカルユーザーが機密情報を取得する可能性があります。
      * の修正 bsc#1194388 VUL-1 CVE-2022-0128vimvim は領域外読み取りに対して脆弱です
      * の修正 bsc#1195332 VUL-1 CVE-2022-0392vimより前の vim でのヒープベースのバッファオーバーフロー 8.2
      * bsc#1196361 VUL-1 の修正 CVE-2022-0696vim より前の vim における NULL ポインターデリファレンス 8.2
      * bsc#1198748 VUL-1 の修正 CVE-2022-1420vim範囲外のポインターオフセット
      * bsc#1199651 VUL-1 の修正 CVE-2022-1735vimヒープバッファオーバーフロー
      * の修正 bsc#1199655 VUL-1 CVE-2022-1733: vimcindent.c のヒープベースのバッファオーバーフロー
      * bsc#1199693 VUL-1 の修正 CVE-2022-1771vim以前の 8.2vimでのスタック消費。
      * bsc#1199745 VUL-1 の修正 CVE-2022-1785vim領域外書き込み
      * bsc#1199936 VUL-1 の修正 CVE-2022-1851vim領域外読み取り
      * の修正 bsc#1195004 -CVE-2022-0318VUL-0 CVE-2022-0318vim 8.2より前の vim でのヒープベースのバッファオーバーフロー。
      * の修正 bsc#1190570 CVE-2021-3796vimnormal.c 内の nv_replace() での use-after-free
      * の修正 bsc#1191893 CVE-2021-3872vimwin_redr_status()drawscreen.c におけるヒープベースのバッファオーバーフロー
      * の修正 bsc#1192481 CVE-2021-3927vimvim はヒープベースのバッファオーバーフローに対して脆弱です
      * の修正 bsc#1192478 CVE-2021-3928vimvim はスタックベースのバッファオーバーフローに対して脆弱です
      * の修正 bsc#1193294 CVE-2021-4019vimvim はヒープベースのバッファオーバーフローに対して脆弱です
      * の修正 bsc#1193298 CVE-2021-3984vimC-indenting の不正なメモリアクセスにより、ヒープバッファオーバーフローが引き起こされる可能性があります
      * の修正 bsc#1190533 CVE-2021-3778vimregexp_nfa.c のヒープベースのバッファオーバーフロー
      * の修正 bsc#1194216 CVE-2021-4193vim領域外読み取りに対して脆弱です
      * bsc#1194556 CVE-2021-46059vimの修正regexp.cのvim_regexec_multi関数により、Vim 8.2.3883 にポインターデリファレンスの脆弱性があります。これにより、サービス拒否が発生します。
      * bsc#1195066 CVE-2022-0319vim の修正 8.2より前の vim/vim における領域外読み取り。
      * の修正 bsc#1195126 CVE-2022-0351vimeval7() におけるコントロールされていない再帰
      * の修正 bsc#1195202 CVE-2022-0361vimより前の 8.2vimでのヒープベースのバッファオーバーフロー。
      * の修正 bsc#1195356 CVE-2022-0413vimsrc/ex_cmds.c の use-after-free

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - vim is vulnerable to Out-of-bounds Read (CVE-2021-4166, CVE-2021-4193)

  - vim is vulnerable to Use After Free (CVE-2021-4192)

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0213)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0261, CVE-2022-0359,     CVE-2022-0361)

  - Heap-based Buffer Overflow in vim/vim prior to 8.2. (CVE-2022-0318)

  - Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
    (CVE-2022-0351)

  - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. (CVE-2022-0368)

  - Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. (CVE-2022-0392)

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0408)

  - Use After Free in GitHub repository vim/vim prior to 8.2. (CVE-2022-0413, CVE-2022-0443)

  - Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2. (CVE-2022-0417)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - vim is vulnerable to Out-of-bounds Read (CVE-2021-4166, CVE-2021-4193)

  - vim is vulnerable to Use After Free (CVE-2021-4192)

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0213)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0261, CVE-2022-0359,     CVE-2022-0361)

  - Heap-based Buffer Overflow in vim/vim prior to 8.2. (CVE-2022-0318)

  - Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
    (CVE-2022-0351)

  - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. (CVE-2022-0368)

  - Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. (CVE-2022-0392)

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0408)

  - Use After Free in GitHub repository vim/vim prior to 8.2. (CVE-2022-0413, CVE-2022-0443)

  - Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2. (CVE-2022-0417)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0213)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0261, CVE-2022-0359,     CVE-2022-0572)

  - Heap-based Buffer Overflow in vim/vim prior to 8.2. (CVE-2022-0318)

  - Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
    (CVE-2022-0351)

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0408)

  - Use After Free in GitHub repository vim/vim prior to 8.2. (CVE-2022-0413, CVE-2022-0443)

  - Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2. (CVE-2022-0417)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. (CVE-2022-0554)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418. (CVE-2022-0685)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. (CVE-2022-0714)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. (CVE-2022-0729)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1567 advisory.

    2024-02-14: CVE-2021-3778 was added to this advisory.

    2024-02-14: CVE-2021-3875 was added to this advisory.

    2024-02-14: CVE-2021-3872 was added to this advisory.

    A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a     specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is     to data confidentiality and integrity as well as system availability. (CVE-2021-3778)

    An out-of-bounds write flaw was found in vim's drawscreen.c win_redr_status() function. This flaw allows     an attacker to trick a user to open a crafted file with specific arguments in vim, triggering an out-of-     bounds write. The highest threat from this vulnerability is to confidentiality, integrity, and system     availability. (CVE-2021-3872)

    There's an out-of-bounds read flaw in Vim's ex_docmd.c. An attacker who is capable of tricking a user into     opening a specially crafted file could trigger an out-of-bounds read on a memmove operation, potentially     causing an impact to application availability. (CVE-2021-3875)

    It was found that vim was vulnerable to use-after-free flaw in the way it was treating allocated lines in     user functions. A specially crafted file could crash the vim process or possibly lead to other undefined     behaviors. (CVE-2022-0156)

    It was found that vim was vulnerable to a 1 byte heap based out of bounds read flaw in the     `compile_get_env()` function. A file could use that flaw to disclose 1 byte of vim's internal memory.
    (CVE-2022-0158)

    A flaw was found in vim.  The vulnerability occurs due to not checking the length for the NameBuff     function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially     crafted file, leading to a crash or code execution. (CVE-2022-0213)

    A heap based out-of-bounds write flaw was found in vim's ops.c. This flaw allows an attacker to trick a     user to open a crafted file triggering an out-of-bounds write. This vulnerability is capable of crashing     software, modify memory, and possible code execution. (CVE-2022-0261)

    A flaw was found in vim.  The vulnerability occurs due to reading beyond the end of a line in the     utf_head_off function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a     specially crafted file, leading to a crash or code execution. (CVE-2022-0318)

    A flaw was found in vim. The vulnerability occurs due to too many recursions, which can lead to a     segmentation fault. This flaw allows an attacker to input a specially crafted file, leading to a crash or     code execution. (CVE-2022-0351)

    A flaw was found in vim. The vulnerability occurs due to Illegal memory access with large tabstop in Ex     mode, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted     file, leading to a crash or code execution. (CVE-2022-0359)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6026-1 advisory.

    It was discovered that Vim was incorrectly processing Vim buffers. An

    attacker could possibly use this issue to perform illegal memory access and expose sensitive information.
    This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4166)

    It was discovered that Vim was using freed memory when dealing with regular expressions inside a visual     selection. If a user were tricked into opening a specially crafted file, an attacker could crash the     application, leading to a denial of service, or possibly achieve code execution with user privileges. This     issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-4192)

    It was discovered that Vim was incorrectly handling virtual column position operations, which could result     in an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. This     issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-4193)

    It was discovered that Vim was not properly performing bounds checks when updating windows present on a     screen, which could result in a heap buffer overflow. An attacker could possibly use this issue to cause a     denial of service or execute arbitrary code. (CVE-2022-0213)

    It was discovered that Vim was incorrectly performing read and write operations when in visual block mode,     going beyond the end of a line and causing a heap buffer overflow. If a user were tricked into opening a     specially crafted file, an attacker could crash the application, leading to a denial of service, or     possibly achieve code execution with user privileges. This issue only affected Ubuntu 18.04 LTS, Ubuntu     20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-0261, CVE-2022-0318)

    It was discovered that Vim was incorrectly handling window exchanging operations when in Visual mode,     which could result in an out-of-bounds read. An attacker could possibly use this issue to expose sensitive     information. (CVE-2022-0319)

    It was discovered that Vim was incorrectly handling recursion when parsing conditional expressions. An     attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
    (CVE-2022-0351)

    It was discovered that Vim was not properly handling memory allocation when processing data in Ex mode,     which could result in a heap buffer overflow. An attacker could possibly use this issue to cause a denial     of service or execute arbitrary code. (CVE-2022-0359)

    It was discovered that Vim was not properly performing bounds checks when executing line operations in     Visual mode, which could result in a heap buffer overflow. An attacker could possibly use this issue to     cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu     20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-0361, CVE-2022-0368)

    It was discovered that Vim was not properly handling loop conditions when looking for spell suggestions,     which could result in a stack buffer overflow. An attacker could possibly use this issue to cause a denial     of service or execute arbitrary code. (CVE-2022-0408)

    It was discovered that Vim was incorrectly handling memory access when executing buffer operations, which     could result in the usage of freed memory. An attacker could possibly use this issue to execute arbitrary     code. (CVE-2022-0443)

    It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this     issue to perform illegal memory access and expose sensitive information. (CVE-2022-0554)

    It was discovered that Vim was not properly performing bounds checks for column numbers when replacing     tabs with spaces or spaces with tabs, which could cause a heap buffer overflow. An attacker could possibly     use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0572)

    It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this     issue to perform illegal memory access and expose sensitive information. This issue only affected Ubuntu     20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-0629)

    It was discovered that Vim was not properly performing validation of data that contained special multi-     byte characters, which could cause an out-of-bounds read. An attacker could possibly use this issue to     cause a denial of service. (CVE-2022-0685)

    It was discovered that Vim was incorrectly processing data used to define indentation in a file, which     could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of     service. (CVE-2022-0714)

    It was discovered that Vim was incorrectly processing certain regular expression patterns and strings,     which could cause an out-of-bounds read. An attacker could possibly use this issue to cause a denial of     service. (CVE-2022-0729)

    It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue     to cause the corruption of sensitive information, a crash, or arbitrary code execution. (CVE-2022-2207)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4619-1 advisory.

    Updated to version 9.0.0814:

      * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
      * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
      * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
      * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
      * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file     quickfix.c
      * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
      * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
      * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at     insexpand.c
      * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
      * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
      * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim     prior to 9.0.0404.
      * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in     eval.c
      * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
      * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
      * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
      * Fixing bsc#1200884 Vim: Error on startup
      * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
      * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address()     Tue 08:37
      * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
      * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
      * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim     prior to 9.0.0044
      * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
      * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to     9.0.0046.
      * Fixing bsc#1201620 vim: SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch     issue
      * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
      * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
      * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
      * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
      * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
      * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
      * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
      * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
      * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
      * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
      * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer     overflow
      * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
      * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
      * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
      * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
      * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
      * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
      * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
      * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
      * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
      * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to     ins_comp_get_next_word_or_line()
      * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
      * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
      * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to     diff_mark_adjust_tp() and ex_diffgetput()
      * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
      * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
      * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
      * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
      * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
      * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in     evalvars.c
      * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim     prior to 9.0.0240
      * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
      * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00
      * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
      * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
      * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to         Heap-based Buffer Overflow
      * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to         Heap-based Buffer Overflow
      * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use         After Free
      * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()         in src/ex_docmd.c
      * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to         Heap-based Buffer Overflow
      * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to         Out-of-bounds Read
      * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to         Out-of-bounds Read
      * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
      * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow         in vim prior to 8.2.
      * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to         Heap-based Buffer Overflow
      * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in         vim prior to 8.2.
      * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in         init_ccline() in ex_getln.c
      * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in         Conda vim prior to 8.2.
      * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow         in skip_range
      * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in         append_command
      * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in         function cmdline_erase_chars
      * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in         function vim_regexec_string
      * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in         find_pattern_in_path
      * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
      * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior         to 8.2
      * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior         to 8.2
      * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a         .swp file to the editor's primary group, which allows local users to obtain         sensitive information
      * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to         Out-of-bounds Read
      * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow         in vim prior to 8.2
      * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in         vim prior to 8.2
      * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
      * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
      * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in         cindent.c
      * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior         to 8.2.
      * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
      * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read
      * Fixing bsc#1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in vim     prior to 8.2.
      * Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in normal.c
      * Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in win_redr_status() drawscreen.c
      * Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to Heap-based Buffer Overflow
      * Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
      * Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to Heap-based Buffer Overflow
      * Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting could lead to Heap     Buffer Overflow
      * Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
      *  Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
      * Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability         exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which causes a denial of     service.
      * Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim prior to 8.2.
      * Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
      * Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim prior to 8.2.
      * Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3182 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3182-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     November 08, 2022                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : vim     Version        : 2:8.1.0875-5+deb10u3     CVE ID         : CVE-2021-3927 CVE-2021-3928 CVE-2021-3974 CVE-2021-3984                      CVE-2021-4019 CVE-2021-4069 CVE-2021-4192 CVE-2021-4193                      CVE-2022-0213 CVE-2022-0261 CVE-2022-0319 CVE-2022-0351                      CVE-2022-0359 CVE-2022-0361 CVE-2022-0368 CVE-2022-0408                      CVE-2022-0413 CVE-2022-0417 CVE-2022-0443 CVE-2022-0554                      CVE-2022-0572 CVE-2022-0685 CVE-2022-0714 CVE-2022-0729                      CVE-2022-0943 CVE-2022-1154 CVE-2022-1616 CVE-2022-1720                      CVE-2022-1851 CVE-2022-1898 CVE-2022-1968 CVE-2022-2285                      CVE-2022-2304 CVE-2022-2598 CVE-2022-2946 CVE-2022-3099                      CVE-2022-3134 CVE-2022-3234 CVE-2022-3324 CVE-2022-3705

    Multiple security vulnerabilities have been discovered in vim, an enhanced     vi editor. Buffer overflows, out-of-bounds reads and use-after-free may lead to     a denial-of-service (application crash) or other unspecified impact.

    For Debian 10 buster, these problems have been fixed in version     2:8.1.0875-5+deb10u3.

    We recommend that you upgrade your vim packages.

    For the detailed security status of vim please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/vim

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
166352	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	Nessus	Amazon Linux Local Security Checks	2022/10/20	2024/12/11	critical
158195	Amazon Linux AMI : vim (ALAS-2022-1567)	Nessus	Amazon Linux Local Security Checks	2022/2/19	2024/12/11	critical
174460	Ubuntu18.04LTS/20.04 LTS/22.04 LTS: Vim の脆弱性 (USN-6026-1)	Nessus	Ubuntu Local Security Checks	2023/4/19	2025/9/3	critical
167256	DebianDLA-3182-1: vim - LTS セキュリティ更新	Nessus	Debian Local Security Checks	2022/11/10	2025/1/22	high
169350	SUSE SLES12 セキュリティ更新: vim (SUSE-SU-2022:4619-1)	Nessus	SuSE Local Security Checks	2022/12/28	2025/9/24	critical
159775	EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-1441)	Nessus	Huawei Local Security Checks	2022/4/18	2023/11/1	critical
159784	EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-1462)	Nessus	Huawei Local Security Checks	2022/4/18	2023/11/1	critical
160608	EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2022-1617)	Nessus	Huawei Local Security Checks	2022/5/5	2023/10/30	critical
160164	EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1591)	Nessus	Huawei Local Security Checks	2022/4/25	2023/10/31	critical
158195	Amazon Linux AMI : vim (ALAS-2022-1567)	Nessus	Amazon Linux Local Security Checks	2022/2/19	2024/12/11	critical
174460	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6026-1)	Nessus	Ubuntu Local Security Checks	2023/4/19	2025/9/3	critical
169350	SUSE SLES12 Security Update : vim (SUSE-SU-2022:4619-1)	Nessus	SuSE Local Security Checks	2022/12/28	2025/9/24	critical
167256	Debian dla-3182 : vim - security update	Nessus	Debian Local Security Checks	2022/11/10	2025/1/22	high

偵測

搜尋 Plugin

critical

critical

critical

high

critical

critical

critical

critical

critical

critical

critical

critical

high