Бюллетень безопасности RHSA-2022:5242

Высокая (6.8)

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

RedHat

vim-common (any) vim-enhanced (any) vim-filesystem (any) vim-minimal (any) vim-X11 (any)

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: Use of Out-of-range Pointer Offset in vim (CVE-2022-0554)

* vim: Heap-based Buffer Overflow occurs in vim (CVE-2022-0943)

* vim: Out-of-range Pointer Offset (CVE-2022-1420)

* vim: heap buffer overflow (CVE-2022-1621)

* vim: buffer over-read (CVE-2022-1629)

* vim: use after free in utf_ptr2char (CVE-2022-1154)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Используйте рекомендации производителя, доступные по ссылке https://access.redhat.com/knowledge/articles/11258

Источник: CVE
Наименование: CVE-2022-0554
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0554

Источник: CVE
Наименование: CVE-2022-0943
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0943

Источник: CVE
Наименование: CVE-2022-1154
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1154

Источник: CVE
Наименование: CVE-2022-1420
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1420

Источник: CVE
Наименование: CVE-2022-1621
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1621

Источник: CVE
Наименование: CVE-2022-1629
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1629

https://access.redhat.com/errata/RHSA-2022:5242