Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may lead to the tboff position within the typebuf variable to point outside of the valid buffer size, which can then later lead to a heap-buffer overflow in e.g. instypebuf(). Therefore, when flushing the typeahead buffer, check if there is enough space left before advancing the off position. If not, fall back to flush current typebuf contents. It's not quite clear yet, what can lead to this situation. It seems to happen when error messages occur (which will cause Vim to flush the typeahead buffer) in comnination with several long mappgins and so it may eventually move the off position out of a valid buffer size. Impact is low since it is not easily reproducible and requires to have several mappings active and run into some error condition. But when this happens, this will cause a crash. The issue has been fixed as of Vim patch v9.1.0697. Users are advised to upgrade. There are no known workarounds for this issue.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-athena" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-athena-dbgsym" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-common" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-common-dbgsym" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-dbg" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-dbgsym" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-doc" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-gnome" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-gnome-dbgsym" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-gtk" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-gtk-dbgsym" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-gui-common" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-lesstif" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-nox" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-nox-dbgsym" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-runtime" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-tiny" }, { "binary_version": "2:7.4.052-1ubuntu3.1+esm19", "binary_name": "vim-tiny-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-athena" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-athena-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-athena-py2" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-athena-py2-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-common" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-common-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-doc" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gnome" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gnome-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gnome-py2" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gnome-py2-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gtk" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gtk-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gtk-py2" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gtk-py2-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gtk3" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gtk3-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gtk3-py2" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gtk3-py2-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-gui-common" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-nox" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-nox-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-nox-py2" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-nox-py2-dbgsym" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-runtime" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-tiny" }, { "binary_version": "2:7.4.1689-3ubuntu1.5+esm25", "binary_name": "vim-tiny-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-athena" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-athena-dbgsym" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-common" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-dbgsym" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-doc" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-gnome" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-gtk" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-gtk-dbgsym" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-gtk3" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-gtk3-dbgsym" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-gui-common" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-nox" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-nox-dbgsym" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-runtime" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-tiny" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "vim-tiny-dbgsym" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "xxd" }, { "binary_version": "2:8.0.1453-1ubuntu1.13+esm10", "binary_name": "xxd-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-athena" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-athena-dbgsym" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-common" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-dbgsym" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-doc" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-gtk" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-gtk3" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-gtk3-dbgsym" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-gui-common" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-nox" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-nox-dbgsym" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-runtime" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-tiny" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "vim-tiny-dbgsym" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "xxd" }, { "binary_version": "2:8.1.2269-1ubuntu5.25", "binary_name": "xxd-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-athena" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-athena-dbgsym" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-common" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-dbgsym" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-doc" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-gtk" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-gtk3" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-gtk3-dbgsym" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-gui-common" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-nox" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-nox-dbgsym" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-runtime" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-tiny" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "vim-tiny-dbgsym" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "xxd" }, { "binary_version": "2:8.2.3995-1ubuntu2.19", "binary_name": "xxd-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-athena" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-common" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-dbgsym" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-doc" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-gtk3" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-gtk3-dbgsym" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-gui-common" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-motif" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-motif-dbgsym" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-nox" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-nox-dbgsym" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-runtime" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-tiny" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "vim-tiny-dbgsym" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "xxd" }, { "binary_version": "2:9.1.0496-1ubuntu6", "binary_name": "xxd-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-athena" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-common" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-dbgsym" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-doc" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-gtk3" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-gtk3-dbgsym" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-gui-common" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-motif" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-motif-dbgsym" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-nox" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-nox-dbgsym" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-runtime" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-tiny" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "vim-tiny-dbgsym" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "xxd" }, { "binary_version": "2:9.1.0016-1ubuntu7.3", "binary_name": "xxd-dbgsym" } ] }