Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Ubuntu 22.04 LTS: 5613-1 Critical: Vim Denial Of Service Threats

ubuntu
Calendar Grey September 15, 2022
Dist Ubuntu Esm H88
Numerous vulnerabilities in Vim resolved through patches for Ubuntu versions, alongside enhancements in functionality and protection.
Several security issues were fixed in Vim.

Summary

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

It was discovered that Vim was not properly performing bounds checks

when executing spell suggestion commands. An attacker could possibly use

this issue to cause a denial of service or execute arbitrary code.

(CVE-2022-0943)

It was discovered that Vim was using freed memory when dealing with

regular expressions through its old regular expression engine. If a user

were tricked into opening a specially crafted file, an attacker could

crash the application, leading to a denial of service, or possibly achieve

code execution. (CVE-2022-1154)

It was discovered that Vim was not properly performing checks on name of

lambda functions. An attacker could possibly use this issue to cause a

denial of service. This issue affected only Ubuntu 22.04 LTS.

(CVE-2022-1420)

It was discovered that Vim was incorrectly performing bounds checks

when processing invalid commands with compo...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical software update Ubuntu Vim

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  vim                             2:8.2.3995-1ubuntu2.1

Ubuntu 20.04 LTS:
  vim                             2:8.1.2269-1ubuntu5.8

Ubuntu 18.04 LTS:
  vim                             2:8.0.1453-1ubuntu1.9

Ubuntu 14.04 ESM:
  vim                             2:7.4.052-1ubuntu3.1+esm5

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5613-1

CVE-2022-0943, CVE-2022-1154, CVE-2022-1420, CVE-2022-1616,

CVE-2022-1619, CVE-2022-1620, CVE-2022-1621

Severity
critical
Lowest
Low
Medium
High
Critical

September 15, 2022

Topics%20covered

Topics Covered

security advisory denial of service critical software update Ubuntu Vim

Package Information

https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.1
https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.8
https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.9

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.