Withdrawn by the publisher.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP3: vim, openEuler:22.03-LTS: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.(CVE-2022-1720) NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.(CVE-2022-2208) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-2207) Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.(CVE-2022-2183) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.(CVE-2022-2284) Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.(CVE-2022-2285) Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.(CVE-2022-2304) Use After Free in GitHub repository vim/vim prior to 9.0.0046.(CVE-2022-2345) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.(CVE-2022-2344) Use After Free in GitHub repository vim/vim prior to 8.2.(CVE-2022-2042) Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.(CVE-2022-2000)

gvim-9.0.0453-2.1 on GA media

Security update for vim

Affected: Ubuntu:20.04:LTS: vim, Ubuntu:22.04:LTS: vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

UPDATE A: Two devices (ENERGY AXC PU, SMARTRTU AXC SG) added (24.11.2022) Update for PLCnext Firmware containing fixes for recent vulnerability findings in Linux components and security enhancements. PLCnext Control AXC F x152 is certified according to IEC 62443-4-1 and IEC 62443-4-2. This certification requires that all third-party components used in the firmware are regularly checked for known vulnerabilities.

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.