USN-6154-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-6154-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6154-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-6154-1

Related

Published

2023-06-12T11:33:47.488665Z

Modified

2023-06-12T11:33:47.488665Z

Summary

vim vulnerabilities

Details

It was discovered that Vim was using uninitialized memory when fuzzy matching, which could lead to invalid memory access. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10 and Ubuntu 23.04. (CVE-2023-2426)

It was discovered that Vim was not properly performing bounds checks when processing register contents, which could lead to a NULL pointer dereference. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-2609)

It was discovered that Vim was not properly limiting the length of substitution expression strings, which could lead to excessive memory consumption. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-2610)

References

Affected packages

Ubuntu:Pro:14.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:7.4.052-1ubuntu3.1+esm10

Affected versions

2:7.*

2:7.4.000-1ubuntu2

2:7.4.052-1ubuntu1

2:7.4.052-1ubuntu2

2:7.4.052-1ubuntu3

2:7.4.052-1ubuntu3.1

2:7.4.052-1ubuntu3.1+esm1

2:7.4.052-1ubuntu3.1+esm3

2:7.4.052-1ubuntu3.1+esm4

2:7.4.052-1ubuntu3.1+esm5

2:7.4.052-1ubuntu3.1+esm6

2:7.4.052-1ubuntu3.1+esm7

2:7.4.052-1ubuntu3.1+esm8

2:7.4.052-1ubuntu3.1+esm9

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-common-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-dbg"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-gnome"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-gnome-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-gtk-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-lesstif"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm10",
            "binary_name": "vim-tiny-dbgsym"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:7.4.1689-3ubuntu1.5+esm18

Affected versions

2:7.*

2:7.4.712-2ubuntu4

2:7.4.826-1ubuntu1

2:7.4.826-1ubuntu2

2:7.4.826-1ubuntu3

2:7.4.963-1ubuntu1

2:7.4.963-1ubuntu4

2:7.4.963-1ubuntu5

2:7.4.1689-3ubuntu1

2:7.4.1689-3ubuntu1.1

2:7.4.1689-3ubuntu1.2

2:7.4.1689-3ubuntu1.3

2:7.4.1689-3ubuntu1.4

2:7.4.1689-3ubuntu1.5

2:7.4.1689-3ubuntu1.5+esm2

2:7.4.1689-3ubuntu1.5+esm3

2:7.4.1689-3ubuntu1.5+esm4

2:7.4.1689-3ubuntu1.5+esm5

2:7.4.1689-3ubuntu1.5+esm6

2:7.4.1689-3ubuntu1.5+esm7

2:7.4.1689-3ubuntu1.5+esm8

2:7.4.1689-3ubuntu1.5+esm10

2:7.4.1689-3ubuntu1.5+esm11

2:7.4.1689-3ubuntu1.5+esm12

2:7.4.1689-3ubuntu1.5+esm13

2:7.4.1689-3ubuntu1.5+esm14

2:7.4.1689-3ubuntu1.5+esm15

2:7.4.1689-3ubuntu1.5+esm17

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-athena-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-athena-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-common-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gnome"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gnome-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gnome-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gnome-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gtk-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gtk-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gtk-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gtk3-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gtk3-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-nox-py2"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-nox-py2-dbgsym"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:7.4.1689-3ubuntu1.5+esm18",
            "binary_name": "vim-tiny-dbgsym"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.0.1453-1ubuntu1.13+esm1

Affected versions

2:8.*

2:8.0.0197-4ubuntu5

2:8.0.1144-1ubuntu1

2:8.0.1401-1ubuntu1

2:8.0.1401-1ubuntu2

2:8.0.1401-1ubuntu3

2:8.0.1453-1ubuntu1

2:8.0.1453-1ubuntu1.1

2:8.0.1453-1ubuntu1.3

2:8.0.1453-1ubuntu1.4

2:8.0.1453-1ubuntu1.6

2:8.0.1453-1ubuntu1.7

2:8.0.1453-1ubuntu1.8

2:8.0.1453-1ubuntu1.9

2:8.0.1453-1ubuntu1.10

2:8.0.1453-1ubuntu1.11

2:8.0.1453-1ubuntu1.12

2:8.0.1453-1ubuntu1.13

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-gnome"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-gtk-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13+esm1",
            "binary_name": "xxd-dbgsym"
        }
    ]
}

Ubuntu:20.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.2269-1ubuntu5.15

Affected versions

2:8.*

2:8.1.0875-5ubuntu2

2:8.1.0875-5ubuntu3

2:8.1.0875-5ubuntu4

2:8.1.2269-1ubuntu1

2:8.1.2269-1ubuntu4

2:8.1.2269-1ubuntu5

2:8.1.2269-1ubuntu5.3

2:8.1.2269-1ubuntu5.4

2:8.1.2269-1ubuntu5.6

2:8.1.2269-1ubuntu5.7

2:8.1.2269-1ubuntu5.8

2:8.1.2269-1ubuntu5.9

2:8.1.2269-1ubuntu5.11

2:8.1.2269-1ubuntu5.12

2:8.1.2269-1ubuntu5.13

2:8.1.2269-1ubuntu5.14

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.15",
            "binary_name": "xxd-dbgsym"
        }
    ]
}

Ubuntu:22.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.2.3995-1ubuntu2.8

Affected versions

2:8.*

2:8.2.2434-3ubuntu3

2:8.2.2434-3ubuntu4

2:8.2.3565-1ubuntu1

2:8.2.3565-1ubuntu2

2:8.2.3565-1ubuntu3

2:8.2.3565-1ubuntu5

2:8.2.3995-1ubuntu1

2:8.2.3995-1ubuntu2

2:8.2.3995-1ubuntu2.1

2:8.2.3995-1ubuntu2.3

2:8.2.3995-1ubuntu2.4

2:8.2.3995-1ubuntu2.5

2:8.2.3995-1ubuntu2.7

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.8",
            "binary_name": "xxd-dbgsym"
        }
    ]
}