UBUNTU-CVE-2025-22134

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-22134

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-22134.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-22134

Related

Published

2025-01-13T21:15:00Z

Modified

2025-01-23T16:08:39Z

Summary

[none]

Details

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visual mode before opening other windows and buffers and therefore fix this bug. In addition it does verify that it won't try to access a position if the position is greater than the corresponding buffer line. Impact is medium since the user must have switched on visual mode when executing the :all ex command. The Vim project would like to thank github user gandalf4a for reporting this issue. The issue has been fixed as of Vim patch v9.1.1003

References

Affected packages

Ubuntu:Pro:14.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:7.4.052-1ubuntu3.1+esm20?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:7.*

2:7.4.000-1ubuntu2

2:7.4.052-1ubuntu1

2:7.4.052-1ubuntu2

2:7.4.052-1ubuntu3

2:7.4.052-1ubuntu3.1

2:7.4.052-1ubuntu3.1+esm1

2:7.4.052-1ubuntu3.1+esm3

2:7.4.052-1ubuntu3.1+esm4

2:7.4.052-1ubuntu3.1+esm5

2:7.4.052-1ubuntu3.1+esm6

2:7.4.052-1ubuntu3.1+esm7

2:7.4.052-1ubuntu3.1+esm8

2:7.4.052-1ubuntu3.1+esm9

2:7.4.052-1ubuntu3.1+esm10

2:7.4.052-1ubuntu3.1+esm11

2:7.4.052-1ubuntu3.1+esm12

2:7.4.052-1ubuntu3.1+esm13

2:7.4.052-1ubuntu3.1+esm14

2:7.4.052-1ubuntu3.1+esm15

2:7.4.052-1ubuntu3.1+esm16

2:7.4.052-1ubuntu3.1+esm17

2:7.4.052-1ubuntu3.1+esm18

2:7.4.052-1ubuntu3.1+esm19

2:7.4.052-1ubuntu3.1+esm20

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:7.4.1689-3ubuntu1.5+esm26?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:7.*

2:7.4.712-2ubuntu4

2:7.4.826-1ubuntu1

2:7.4.826-1ubuntu2

2:7.4.826-1ubuntu3

2:7.4.963-1ubuntu1

2:7.4.963-1ubuntu4

2:7.4.963-1ubuntu5

2:7.4.1689-3ubuntu1

2:7.4.1689-3ubuntu1.1

2:7.4.1689-3ubuntu1.2

2:7.4.1689-3ubuntu1.3

2:7.4.1689-3ubuntu1.4

2:7.4.1689-3ubuntu1.5

2:7.4.1689-3ubuntu1.5+esm2

2:7.4.1689-3ubuntu1.5+esm3

2:7.4.1689-3ubuntu1.5+esm4

2:7.4.1689-3ubuntu1.5+esm5

2:7.4.1689-3ubuntu1.5+esm6

2:7.4.1689-3ubuntu1.5+esm7

2:7.4.1689-3ubuntu1.5+esm8

2:7.4.1689-3ubuntu1.5+esm10

2:7.4.1689-3ubuntu1.5+esm11

2:7.4.1689-3ubuntu1.5+esm12

2:7.4.1689-3ubuntu1.5+esm13

2:7.4.1689-3ubuntu1.5+esm14

2:7.4.1689-3ubuntu1.5+esm15

2:7.4.1689-3ubuntu1.5+esm17

2:7.4.1689-3ubuntu1.5+esm18

2:7.4.1689-3ubuntu1.5+esm19

2:7.4.1689-3ubuntu1.5+esm20

2:7.4.1689-3ubuntu1.5+esm22

2:7.4.1689-3ubuntu1.5+esm23

2:7.4.1689-3ubuntu1.5+esm24

2:7.4.1689-3ubuntu1.5+esm25

2:7.4.1689-3ubuntu1.5+esm26

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:8.0.1453-1ubuntu1.13+esm11?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:8.*

2:8.0.0197-4ubuntu5

2:8.0.1144-1ubuntu1

2:8.0.1401-1ubuntu1

2:8.0.1401-1ubuntu2

2:8.0.1401-1ubuntu3

2:8.0.1453-1ubuntu1

2:8.0.1453-1ubuntu1.1

2:8.0.1453-1ubuntu1.3

2:8.0.1453-1ubuntu1.4

2:8.0.1453-1ubuntu1.6

2:8.0.1453-1ubuntu1.7

2:8.0.1453-1ubuntu1.8

2:8.0.1453-1ubuntu1.9

2:8.0.1453-1ubuntu1.10

2:8.0.1453-1ubuntu1.11

2:8.0.1453-1ubuntu1.12

2:8.0.1453-1ubuntu1.13

2:8.0.1453-1ubuntu1.13+esm1

2:8.0.1453-1ubuntu1.13+esm3

2:8.0.1453-1ubuntu1.13+esm4

2:8.0.1453-1ubuntu1.13+esm5

2:8.0.1453-1ubuntu1.13+esm6

2:8.0.1453-1ubuntu1.13+esm7

2:8.0.1453-1ubuntu1.13+esm8

2:8.0.1453-1ubuntu1.13+esm9

2:8.0.1453-1ubuntu1.13+esm10

2:8.0.1453-1ubuntu1.13+esm11

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5.30?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.2269-1ubuntu5.30

Affected versions

2:8.*

2:8.1.0875-5ubuntu2

2:8.1.0875-5ubuntu3

2:8.1.0875-5ubuntu4

2:8.1.2269-1ubuntu1

2:8.1.2269-1ubuntu4

2:8.1.2269-1ubuntu5

2:8.1.2269-1ubuntu5.3

2:8.1.2269-1ubuntu5.4

2:8.1.2269-1ubuntu5.6

2:8.1.2269-1ubuntu5.7

2:8.1.2269-1ubuntu5.8

2:8.1.2269-1ubuntu5.9

2:8.1.2269-1ubuntu5.11

2:8.1.2269-1ubuntu5.12

2:8.1.2269-1ubuntu5.13

2:8.1.2269-1ubuntu5.14

2:8.1.2269-1ubuntu5.15

2:8.1.2269-1ubuntu5.16

2:8.1.2269-1ubuntu5.17

2:8.1.2269-1ubuntu5.18

2:8.1.2269-1ubuntu5.20

2:8.1.2269-1ubuntu5.21

2:8.1.2269-1ubuntu5.22

2:8.1.2269-1ubuntu5.23

2:8.1.2269-1ubuntu5.24

2:8.1.2269-1ubuntu5.25

2:8.1.2269-1ubuntu5.26

2:8.1.2269-1ubuntu5.29

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.30",
            "binary_name": "xxd-dbgsym"
        }
    ]
}

Ubuntu:22.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:8.2.3995-1ubuntu2.22?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.2.3995-1ubuntu2.22

Affected versions

2:8.*

2:8.2.2434-3ubuntu3

2:8.2.2434-3ubuntu4

2:8.2.3565-1ubuntu1

2:8.2.3565-1ubuntu2

2:8.2.3565-1ubuntu3

2:8.2.3565-1ubuntu5

2:8.2.3995-1ubuntu1

2:8.2.3995-1ubuntu2

2:8.2.3995-1ubuntu2.1

2:8.2.3995-1ubuntu2.3

2:8.2.3995-1ubuntu2.4

2:8.2.3995-1ubuntu2.5

2:8.2.3995-1ubuntu2.7

2:8.2.3995-1ubuntu2.8

2:8.2.3995-1ubuntu2.9

2:8.2.3995-1ubuntu2.10

2:8.2.3995-1ubuntu2.11

2:8.2.3995-1ubuntu2.12

2:8.2.3995-1ubuntu2.13

2:8.2.3995-1ubuntu2.15

2:8.2.3995-1ubuntu2.16

2:8.2.3995-1ubuntu2.17

2:8.2.3995-1ubuntu2.18

2:8.2.3995-1ubuntu2.19

2:8.2.3995-1ubuntu2.20

2:8.2.3995-1ubuntu2.21

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.22",
            "binary_name": "xxd-dbgsym"
        }
    ]
}

Ubuntu:24.10 / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:9.1.0496-1ubuntu6.3?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:9.1.0496-1ubuntu6.3

Affected versions

2:9.*

2:9.1.0016-1ubuntu7

2:9.1.0377-1ubuntu1

2:9.1.0496-1ubuntu2

2:9.1.0496-1ubuntu4

2:9.1.0496-1ubuntu5

2:9.1.0496-1ubuntu6

2:9.1.0496-1ubuntu6.1

2:9.1.0496-1ubuntu6.2

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-motif"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-motif-dbgsym"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:9.1.0496-1ubuntu6.3",
            "binary_name": "xxd-dbgsym"
        }
    ]
}

Ubuntu:24.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim@2:9.1.0016-1ubuntu7.6?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:9.1.0016-1ubuntu7.6

Affected versions

2:9.*

2:9.0.1672-1ubuntu2

2:9.0.2087-1ubuntu1

2:9.0.2116-1ubuntu1

2:9.0.2116-1ubuntu2

2:9.0.2184-0ubuntu1

2:9.0.2189-1ubuntu1

2:9.1.0-1ubuntu1

2:9.1.0016-1ubuntu2

2:9.1.0016-1ubuntu6

2:9.1.0016-1ubuntu7

2:9.1.0016-1ubuntu7.1

2:9.1.0016-1ubuntu7.2

2:9.1.0016-1ubuntu7.3

2:9.1.0016-1ubuntu7.4

2:9.1.0016-1ubuntu7.5

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-motif"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-motif-dbgsym"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:9.1.0016-1ubuntu7.6",
            "binary_name": "xxd-dbgsym"
        }
    ]
}