Lucene search
AlmaLinuxALSA-2022:5319HistoryJun 30, 2022 - 12:00 a.m.
Moderate: vim security update
2022-06-3000:00:00
errata.almalinux.org
18
vim editor
security update
heap buffer overflow
buffer over-read
unix
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
72.1%
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
- vim: heap buffer overflow (CVE-2022-1621)
- vim: buffer over-read (CVE-2022-1629)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | noarch | vim-filesystem | < 8.0.1763-19.el8_6.2 | vim-filesystem-8.0.1763-19.el8_6.2.noarch.rpm |
| almalinux | 8 | x86_64 | vim-enhanced | < 8.0.1763-19.el8_6.2 | vim-enhanced-8.0.1763-19.el8_6.2.x86_64.rpm |
| almalinux | 8 | x86_64 | vim-common | < 8.0.1763-19.el8_6.2 | vim-common-8.0.1763-19.el8_6.2.x86_64.rpm |
| almalinux | 8 | x86_64 | vim-x11 | < 8.0.1763-19.el8_6.2 | vim-X11-8.0.1763-19.el8_6.2.x86_64.rpm |
| almalinux | 8 | x86_64 | vim-minimal | < 8.0.1763-19.el8_6.2 | vim-minimal-8.0.1763-19.el8_6.2.x86_64.rpm |
| almalinux | 8 | aarch64 | vim-minimal | < 8.0.1763-19.el8_6.2 | vim-minimal-8.0.1763-19.el8_6.2.aarch64.rpm |
| almalinux | 8 | aarch64 | vim-x11 | < 8.0.1763-19.el8_6.2 | vim-X11-8.0.1763-19.el8_6.2.aarch64.rpm |
| almalinux | 8 | aarch64 | vim-common | < 8.0.1763-19.el8_6.2 | vim-common-8.0.1763-19.el8_6.2.aarch64.rpm |
| almalinux | 8 | aarch64 | vim-enhanced | < 8.0.1763-19.el8_6.2 | vim-enhanced-8.0.1763-19.el8_6.2.aarch64.rpm |
| almalinux | 8 | ppc64le | vim-x11 | < 8.0.1763-19.el8_6.2 | vim-X11-8.0.1763-19.el8_6.2.ppc64le.rpm |
Related
nessus
nessus
Rocky Linux 8 : vim (RLSA-2022:5319)
2023-11-06 00:00:00
RHEL 8 : vim (RHSA-2022:5319)
2022-07-01 00:00:00
Oracle Linux 8 : vim (ELSA-2022-5319)
2022-07-01 00:00:00
oraclelinux
oraclelinux
vim security update
2022-07-01 00:00:00
vim security update
2022-06-30 00:00:00
osv
osv
Moderate: vim security update
2022-06-28 10:52:18
Moderate: vim security update
2022-06-30 00:00:00
CVE-2022-1629
2022-05-10 14:15:00
redhat
redhat
(RHSA-2022:5319) Moderate: vim security update
2022-06-28 10:52:18
(RHSA-2022:5242) Moderate: vim security update
2022-06-28 08:27:06
(RHSA-2022:5704) Moderate: ACS 3.71 enhancement and security update
2022-07-25 21:38:29
rocky
rocky
vim security update
2022-06-28 10:52:18
alpinelinux
alpinelinux
CVE-2022-1629
2022-05-10 14:15:08
CVE-2022-1621
2022-05-10 14:15:08
cbl_mariner
cbl_mariner
CVE-2022-1629 affecting package vim 8.2.4774-1
2022-06-15 17:03:10
CVE-2022-1621 affecting package vim 8.2.4774-1
2022-06-15 17:03:10
CVE-2022-1629 affecting package vim for versions less than 8.2.4925-1
2022-06-03 17:54:02
prion
prion
Buffer overflow
2022-05-10 14:15:00
Heap overflow
2022-05-10 14:15:00
redhatcve
redhatcve
CVE-2022-1629
2022-05-11 05:30:45
CVE-2022-1621
2022-05-11 03:59:09
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2022-1629
2022-11-03 18:21:37
cve
cve
CVE-2022-1629
2022-05-10 14:15:08
CVE-2022-1621
2022-05-10 14:15:08
debiancve
debiancve
CVE-2022-1629
2022-05-10 14:15:08
CVE-2022-1621
2022-05-10 14:15:08
nvd
nvd
CVE-2022-1629
2022-05-10 14:15:08
CVE-2022-1621
2022-05-10 14:15:08
ubuntucve
ubuntucve
CVE-2022-1629
2022-05-10 00:00:00
CVE-2022-1621
2022-05-10 00:00:00
huntr
huntr
Buffer Over-read in function find_next_quote
2022-05-08 04:01:59
Heap buffer overflow in vim_strncpy find_word
2022-04-28 20:50:03
fedora
fedora
[SECURITY] Fedora 34 Update: vim-8.2.4927-1.fc34
2022-05-18 01:25:20
veracode
veracode
Out-of-bounds Read
2022-05-20 08:42:46
Heap-Based Buffer Overflow
2022-05-20 08:44:35
openvas
openvas
Fedora: Security Advisory for vim (FEDORA-2022-8df66cdbef)
2022-05-18 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2148)
2022-07-29 00:00:00
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2173)
2022-07-29 00:00:00
cloudlinux
cloudlinux
cvelist
cvelist
CVE-2022-1621 Heap buffer overflow in vim_strncpy find_word in vim/vim
2022-05-09 00:00:00
CVE-2022-1629 Buffer Over-read in function find_next_quote in vim/vim
2022-05-10 00:00:00
almalinux
almalinux
Moderate: vim security update
2022-07-01 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0397
2022-05-26 00:00:00
Important Photon OS Security Update - PHSA-2022-0478
2022-05-27 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0397
2022-05-26 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2215
2023-08-15 09:26:16
altlinux
altlinux
Security fix for the ALT Linux 9 package vim version 4:8.2.5019-alt1
2022-06-02 00:00:00
Security fix for the ALT Linux 10 package vim version 4:8.2.5019-alt1
2022-05-31 00:00:00
redos
redos
ROS-20220525-01
2022-05-25 00:00:00
cloudfoundry
cloudfoundry
USN-5613-1: Vim vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
USN-5995-1: Vim vulnerabilities | Cloud Foundry
2023-04-24 00:00:00
ubuntu
ubuntu
Vim regression
2022-09-19 00:00:00
Vim vulnerabilities
2022-09-15 00:00:00
Vim vulnerabilities
2022-06-30 00:00:00
debian
debian
[SECURITY] [DLA 3011-1] vim security update
2022-05-16 19:42:09
[SECURITY] [DLA 3204-1] vim security update
2022-11-24 09:17:54
mageia
mageia
Updated vim packages fix security vulnerability
2022-05-25 21:46:18
amazon
amazon
Medium: vim
2022-07-19 01:26:00
Medium: vim
2022-07-28 20:41:00
gentoo
gentoo
Vim, gVim: Multiple Vulnerabilities
2023-05-03 00:00:00
Vim, gVim: Multiple Vulnerabilities
2022-08-21 00:00:00
apple
apple
About the security content of macOS Ventura 13
2022-10-24 00:00:00
avleonov
avleonov
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.004
Percentile
72.1%
Related for ALSA-2022:5319