Бюллетень безопасности RHSA-2022:0894

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

RedHat

vim-common (any) vim-enhanced (any) vim-filesystem (any) vim-minimal (any) vim-X11 (any)

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: Heap-based buffer overflow in block_insert() in src/ops.c (CVE-2022-0261)

* vim: Heap-based buffer overflow in utf_head_off() in mbyte.c (CVE-2022-0318)

* vim: Heap-based buffer overflow in init_ccline() in ex_getln.c (CVE-2022-0359)

* vim: Illegal memory access when copying lines in visual mode leads to heap buffer overflow (CVE-2022-0361)

* vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c (CVE-2022-0392)

* vim: Use after free in src/ex_cmds.c (CVE-2022-0413)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Используйте рекомендации производителя, доступные по ссылке https://access.redhat.com/knowledge/articles/11258

Источник: CVE
Наименование: CVE-2022-0261
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0261

Источник: CVE
Наименование: CVE-2022-0318
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0318

Источник: CVE
Наименование: CVE-2022-0359
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0359

Источник: CVE
Наименование: CVE-2022-0361
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0361

Источник: CVE
Наименование: CVE-2022-0392
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0392

Источник: CVE
Наименование: CVE-2022-0413
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0413

https://access.redhat.com/errata/RHSA-2022:0894