Ubuntu 16.04 ESM: USN-5460-1 Critical: Vim Buffer Overflows and DoS

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

It was discovered that Vim was incorrectly processing Vim buffers.

An attacker could possibly use this issue to perform illegal memory

access and expose sensitive information. (CVE-2022-0554)

It was discovered that Vim was not properly performing bounds checks

for column numbers when replacing tabs with spaces or spaces with

tabs, which could cause a heap buffer overflow. An attacker could

possibly use this issue to cause a denial of service or execute

arbitrary code. (CVE-2022-0572)

It was discovered that Vim was not properly performing validation of

data that contained special multi-byte characters, which could cause

an out-of-bounds read. An attacker could possibly use this issue to

cause a denial of service. (CVE-2022-0685)

It was discovered that Vim was incorrectly processing data used to

define indentation in a file, which could cause...