Ubuntu 16.04 ESM: USN-5458-1 Critical: Vim DoS Risks and Fixes

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

It was discovered that Vim was incorrectly handling virtual column

position operations, which could result in an out-of-bounds read. An

attacker could possibly use this issue to expose sensitive

information. (CVE-2021-4193)

It was discovered that Vim was not properly performing bounds checks

when updating windows present on a screen, which could result in a

heap buffer overflow. An attacker could possibly use this issue to

cause a denial of service or execute arbitrary code. (CVE-2022-0213)

It was discovered that Vim was incorrectly handling window

exchanging operations when in Visual mode, which could result in an

out-of-bounds read. An attacker could possibly use this issue to

expose sensitive information. (CVE-2022-0319)

It was discovered that Vim was incorrectly handling recursion when

parsing conditional expressions. An attacker could ...