Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir
ex command to register, variables and files. It also allows to show the contents of registers using the :registers
or :display
ex command. When redirecting the output of :display
to a register, Vim will free the register content before storing the new content in the register. Now when redirecting the :display
command to a register that is being displayed, Vim will free the content while shortly afterwards trying to access it, which leads to a use-after-free. Vim pre 9.1.1115 checks in the ex_display() function, that it does not try to redirect to a register while displaying this register at the same time. However this check is not complete, and so Vim does not check the +
and *
registers (which typically donate the X11/clipboard registers, and when a clipboard connection is not possible will fall back to use register 0 instead. In Patch 9.1.1115 Vim will therefore skip outputting to register zero when trying to redirect to the clipboard registers *
or +
. Users are advised to upgrade. There are no known workarounds for this vulnerability.
{ "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro", "binaries": [ { "binary_name": "vim", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-athena", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-common", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-common-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-dbg", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-doc", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-gnome", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-gnome-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-gtk", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-gtk-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-gui-common", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-lesstif", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-nox", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-runtime", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-tiny", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm21" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "vim", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-athena", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-athena-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-athena-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-common", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-common-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-doc", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gnome", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gnome-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gnome-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gnome-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gtk", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gtk-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gtk-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gtk-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gtk3", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gtk3-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gtk3-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-gui-common", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-nox", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-nox-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-nox-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-runtime", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-tiny", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm27" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "vim", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-athena", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-common", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-doc", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-gnome", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-gtk", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-gtk-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-gtk3", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-gui-common", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-nox", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-runtime", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-tiny", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "xxd", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" }, { "binary_name": "xxd-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm12" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "vim", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-athena", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-common", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-doc", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-gtk", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-gtk3", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-gui-common", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-nox", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-runtime", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-tiny", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "xxd", "binary_version": "2:8.1.2269-1ubuntu5.32" }, { "binary_name": "xxd-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.32" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "vim", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-athena", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-common", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-doc", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-gtk", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-gtk3", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-gui-common", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-nox", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-runtime", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-tiny", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "xxd", "binary_version": "2:8.2.3995-1ubuntu2.24" }, { "binary_name": "xxd-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.24" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "vim", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-athena", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-common", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-doc", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-gtk3", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-gui-common", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-motif", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-motif-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-nox", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-runtime", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-tiny", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "xxd", "binary_version": "2:9.1.0016-1ubuntu7.8" }, { "binary_name": "xxd-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.8" } ] }