USN-5460-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-5460-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5460-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-5460-1

Related

Published

2022-06-06T15:50:45.517491Z

Modified

2022-06-06T15:50:45.517491Z

Summary

vim vulnerabilities

Details

It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. (CVE-2022-0554)

It was discovered that Vim was not properly performing bounds checks for column numbers when replacing tabs with spaces or spaces with tabs, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0572)

It was discovered that Vim was not properly performing validation of data that contained special multi-byte characters, which could cause an out-of-bounds read. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-0685)

It was discovered that Vim was incorrectly processing data used to define indentation in a file, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-0714)

It was discovered that Vim was incorrectly processing certain regular expression patterns and strings, which could cause an out-of-bounds read. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-0729)

It was discovered that Vim was not properly performing bounds checks when executing spell suggestion commands, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0943)

It was discovered that Vim was incorrectly performing bounds checks when processing invalid commands with composing characters in Ex mode, which could cause a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-1616)

It was discovered that Vim was not properly processing latin1 data when issuing Ex commands, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-1619)

It was discovered that Vim was not properly performing memory management when dealing with invalid regular expression patterns in buffers, which could cause a NULL pointer dereference. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-1620)

It was discovered that Vim was not properly processing invalid bytes when performing spell check operations, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-1621)

References

Affected packages

Ubuntu:Pro:16.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:7.4.1689-3ubuntu1.5+esm6

Affected versions

2:7.*

2:7.4.712-2ubuntu4

2:7.4.826-1ubuntu1

2:7.4.826-1ubuntu2

2:7.4.826-1ubuntu3

2:7.4.963-1ubuntu1

2:7.4.963-1ubuntu4

2:7.4.963-1ubuntu5

2:7.4.1689-3ubuntu1

2:7.4.1689-3ubuntu1.1

2:7.4.1689-3ubuntu1.2

2:7.4.1689-3ubuntu1.3

2:7.4.1689-3ubuntu1.4

2:7.4.1689-3ubuntu1.5

2:7.4.1689-3ubuntu1.5+esm2

2:7.4.1689-3ubuntu1.5+esm3

2:7.4.1689-3ubuntu1.5+esm4

2:7.4.1689-3ubuntu1.5+esm5

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-athena-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-athena-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-common-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gnome"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gnome-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gnome-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gnome-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gtk-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gtk-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gtk-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gtk3-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gtk3-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-nox-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-nox-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm6",
            "binary_name": "vim-tiny-dbgsym"
        }
    ]
}