Debian Vim vulnerabilities

CVE-2023-48237 [LOW] CVE-2023-48237: vim - Vim is an open source command line text editor. In affected versions when shifti... Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `6bf131888` which has been included in ver

CVE-2023-48235 [LOW] CVE-2023-48235: vim - Vim is an open source command line text editor. When parsing relative ex address... Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONG_MAX - lnum will cause the overflow. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue

CVE-2023-48233 [LOW] CVE-2023-48233: vim - Vim is an open source command line text editor. If the count after the :s comman... Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, abort with e_value_too_large. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `ac6378773` which has been included in release version 9.0.2108. Users

CVE-2024-43374 [MEDIUM] CVE-2024-43374: vim - The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argu... The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the a

CVE-2023-48706 [LOW] CVE-2023-48706: vim - Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free ... Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive `:s` call causes free-ing of memory which may later then be accessed by the initial `:s` command. The user must intentional

CVE-2022-3278 [MEDIUM] CVE-2022-3278: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. Scope: local bookworm: resolved (fixed in 2:9.0.0626-1) bullseye: open forky: resolved (fixed in 2:9.0.0626-1) sid: resolved (fixed in 2:9.0.0626-1) trixie: resolved (fixed in 2:9.0.0626-1)

CVE-2022-2980 [MEDIUM] CVE-2022-2980: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. Scope: local bookworm: resolved (fixed in 2:9.0.0626-1) bullseye: open forky: resolved (fixed in 2:9.0.0626-1) sid: resolved (fixed in 2:9.0.0626-1) trixie: resolved (fixed in 2:9.0.0626-1)

CVE-2022-1725 [MEDIUM] CVE-2022-1725: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. Scope: local bookworm: resolved (fixed in 2:9.0.0135-1) bullseye: open forky: resolved (fixed in 2:9.0.0135-1) sid: resolved (fixed in 2:9.0.0135-1) trixie: resolved (fixed in 2:9.0.0135-1)

CVE-2022-2923 [MEDIUM] CVE-2022-2923: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. Scope: local bookworm: resolved (fixed in 2:9.0.0242-1) bullseye: open forky: resolved (fixed in 2:9.0.0242-1) sid: resolved (fixed in 2:9.0.0242-1) trixie: resolved (fixed in 2:9.0.0242-1)

CVE-2022-2874 [MEDIUM] CVE-2022-2874: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. Scope: local bookworm: resolved (fixed in 2:9.0.0229-1) bullseye: open forky: resolved (fixed in 2:9.0.0229-1) sid: resolved (fixed in 2:9.0.0229-1) trixie: resolved (fixed in 2:9.0.0229-1)

CVE-2023-2609 [MEDIUM] CVE-2023-2609: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 2:9.0.1658-1) sid: resolved (fixed in 2:9.0.1658-1) trixie: resolved (fixed in 2:9.0.1658-1)

CVE-2022-4293 [MEDIUM] CVE-2022-4293: vim - Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim p... Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804. Scope: local bookworm: resolved (fixed in 2:9.0.0813-1) bullseye: open forky: resolved (fixed in 2:9.0.0813-1) sid: resolved (fixed in 2:9.0.0813-1) trixie: resolved (fixed in 2:9.0.0813-1)

CVE-2022-3153 [MEDIUM] CVE-2022-3153: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. Scope: local bookworm: resolved (fixed in 2:9.0.0626-1) bullseye: open forky: resolved (fixed in 2:9.0.0626-1) sid: resolved (fixed in 2:9.0.0626-1) trixie: resolved (fixed in 2:9.0.0626-1)

CVE-2023-1355 [MEDIUM] CVE-2023-1355: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 2:9.0.1658-1) sid: resolved (fixed in 2:9.0.1658-1) trixie: resolved (fixed in 2:9.0.1658-1)

CVE-2023-5441 [MEDIUM] CVE-2023-5441: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e2869... NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 2:9.0.2018-1) sid: resolved (fixed in 2:9.0.2018-1) trixie: resolved (fixed in 2:9.0.2018-1)

CVE-2023-1264 [MEDIUM] CVE-2023-1264: vim - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 2:9.0.1658-1) sid: resolved (fixed in 2:9.0.1658-1) trixie: resolved (fixed in 2:9.0.1658-1)

CVE-2021-3236 [MEDIUM] CVE-2021-3236: vim - vim 8.2.2348 is affected by null pointer dereference, allows local attackers to ... vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method. Scope: local bookworm: resolved (fixed in 2:8.2.2367-1) bullseye: resolved (fixed in 2:8.2.2367-1) forky: resolved (fixed in 2:8.2.2367-1) sid: resolved (fixed in 2:8.2.2367-1) trixie: resolved (fixed in 2:8.2.2367-1)

CVE-2005-0069 [MEDIUM] CVE-2005-0069: vim - The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overw... The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files. Scope: local bookworm: resolved (fixed in 1:6.3-058+1) bullseye: resolved (fixed in 1:6.3-058+1) forky: resolved (fixed in 1:6.3-058+1) sid: resolved (fixed in 1:6.3-058+1) trixie: resolved (fixed in 1:6.3-058+1)

CVE-2026-28422 [LOW] CVE-2026-28422: vim - Vim is an open source, command line text editor. Prior to version 9.2.0078, a st... Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 2:9.2.0119-1) sid: resolved (fixed in 2:9.2.0119-1)

CVE-2021-3968 [HIGH] CVE-2021-3968: vim - vim is vulnerable to Heap-based Buffer Overflow vim is vulnerable to Heap-based Buffer Overflow Scope: local bookworm: resolved (fixed in 2:8.2.3995-1) bullseye: open forky: resolved (fixed in 2:8.2.3995-1) sid: resolved (fixed in 2:8.2.3995-1) trixie: resolved (fixed in 2:8.2.3995-1)