USN-6026-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-6026-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6026-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/USN-6026-1

Related

Published

2023-04-19T08:57:30.396356Z

Modified

2023-04-19T08:57:30.396356Z

Summary

vim vulnerabilities

Details

It was discovered that Vim was incorrectly processing Vim buffers. An
attacker could possibly use this issue to perform illegal memory access and expose sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4166)

It was discovered that Vim was using freed memory when dealing with regular expressions inside a visual selection. If a user were tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service, or possibly achieve code execution with user privileges. This issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-4192)

It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-4193)

It was discovered that Vim was not properly performing bounds checks when updating windows present on a screen, which could result in a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0213)

It was discovered that Vim was incorrectly performing read and write operations when in visual block mode, going beyond the end of a line and causing a heap buffer overflow. If a user were tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service, or possibly achieve code execution with user privileges. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-0261, CVE-2022-0318)

It was discovered that Vim was incorrectly handling window exchanging operations when in Visual mode, which could result in an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. (CVE-2022-0319)

It was discovered that Vim was incorrectly handling recursion when parsing conditional expressions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0351)

It was discovered that Vim was not properly handling memory allocation when processing data in Ex mode, which could result in a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0359)

It was discovered that Vim was not properly performing bounds checks when executing line operations in Visual mode, which could result in a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-0361, CVE-2022-0368)

It was discovered that Vim was not properly handling loop conditions when looking for spell suggestions, which could result in a stack buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0408)

It was discovered that Vim was incorrectly handling memory access when executing buffer operations, which could result in the usage of freed memory. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-0443)

It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. (CVE-2022-0554)

It was discovered that Vim was not properly performing bounds checks for column numbers when replacing tabs with spaces or spaces with tabs, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0572)

It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-0629)

It was discovered that Vim was not properly performing validation of data that contained special multi-byte characters, which could cause an out-of-bounds read. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-0685)

It was discovered that Vim was incorrectly processing data used to define indentation in a file, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-0714)

It was discovered that Vim was incorrectly processing certain regular expression patterns and strings, which could cause an out-of-bounds read. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-0729)

It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the corruption of sensitive information, a crash, or arbitrary code execution. (CVE-2022-2207)

References

Affected packages

Ubuntu:Pro:14.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:7.4.052-1ubuntu3.1+esm9

Affected versions

2:7.*

2:7.4.000-1ubuntu2

2:7.4.052-1ubuntu1

2:7.4.052-1ubuntu2

2:7.4.052-1ubuntu3

2:7.4.052-1ubuntu3.1

2:7.4.052-1ubuntu3.1+esm1

2:7.4.052-1ubuntu3.1+esm3

2:7.4.052-1ubuntu3.1+esm4

2:7.4.052-1ubuntu3.1+esm5

2:7.4.052-1ubuntu3.1+esm6

2:7.4.052-1ubuntu3.1+esm7

2:7.4.052-1ubuntu3.1+esm8

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-common-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-dbg"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-gnome"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-gnome-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-gtk-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-lesstif"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:7.4.052-1ubuntu3.1+esm9",
            "binary_name": "vim-tiny-dbgsym"
        }
    ]
}

Ubuntu:18.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.0.1453-1ubuntu1.13

Affected versions

2:8.*

2:8.0.0197-4ubuntu5

2:8.0.1144-1ubuntu1

2:8.0.1401-1ubuntu1

2:8.0.1401-1ubuntu2

2:8.0.1401-1ubuntu3

2:8.0.1453-1ubuntu1

2:8.0.1453-1ubuntu1.1

2:8.0.1453-1ubuntu1.3

2:8.0.1453-1ubuntu1.4

2:8.0.1453-1ubuntu1.6

2:8.0.1453-1ubuntu1.7

2:8.0.1453-1ubuntu1.8

2:8.0.1453-1ubuntu1.9

2:8.0.1453-1ubuntu1.10

2:8.0.1453-1ubuntu1.11

2:8.0.1453-1ubuntu1.12

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-gnome"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-gtk-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:8.0.1453-1ubuntu1.13",
            "binary_name": "xxd-dbgsym"
        }
    ]
}

Ubuntu:20.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.2269-1ubuntu5.14

Affected versions

2:8.*

2:8.1.0875-5ubuntu2

2:8.1.0875-5ubuntu3

2:8.1.0875-5ubuntu4

2:8.1.2269-1ubuntu1

2:8.1.2269-1ubuntu4

2:8.1.2269-1ubuntu5

2:8.1.2269-1ubuntu5.3

2:8.1.2269-1ubuntu5.4

2:8.1.2269-1ubuntu5.6

2:8.1.2269-1ubuntu5.7

2:8.1.2269-1ubuntu5.8

2:8.1.2269-1ubuntu5.9

2:8.1.2269-1ubuntu5.11

2:8.1.2269-1ubuntu5.12

2:8.1.2269-1ubuntu5.13

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:8.1.2269-1ubuntu5.14",
            "binary_name": "xxd-dbgsym"
        }
    ]
}

Ubuntu:22.04:LTS / vim

Package

Name: vim
Purl: pkg:deb/ubuntu/vim?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.2.3995-1ubuntu2.7

Affected versions

2:8.*

2:8.2.2434-3ubuntu3

2:8.2.2434-3ubuntu4

2:8.2.3565-1ubuntu1

2:8.2.3565-1ubuntu2

2:8.2.3565-1ubuntu3

2:8.2.3565-1ubuntu5

2:8.2.3995-1ubuntu1

2:8.2.3995-1ubuntu2

2:8.2.3995-1ubuntu2.1

2:8.2.3995-1ubuntu2.3

2:8.2.3995-1ubuntu2.4

2:8.2.3995-1ubuntu2.5

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-athena"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-athena-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-common"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-doc"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-gtk"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-gtk3"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-gtk3-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-gui-common"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-nox"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-nox-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-runtime"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-tiny"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "vim-tiny-dbgsym"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "xxd"
        },
        {
            "binary_version": "2:8.2.3995-1ubuntu2.7",
            "binary_name": "xxd-dbgsym"
        }
    ]
}