Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

Ubuntu 16.04 ESM USN-5775-1 Critical: Vim Denial of Service Attacks

ubuntu
Calendar Grey December 12, 2022
Dist Ubuntu Esm H88
Ubuntu 16.04 ESM update addresses multiple vulnerabilities in Vim, reducing potential for system crashes and preventing unauthorized entry.
Several security issues were fixed in Vim.

Summary

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

It was discovered that Vim uses freed memory in recurisve substitution of

specially crafted patterns. An attacker could possbly use this to crash Vim

and cause denial of service. (CVE-2022-2345)

It was discovered that Vim makes illegal memory calls when patterns start

with an illegal byte. An attacker could possibly use this to crash Vim,

access or modify memory, or execute arbitrary commands. (CVE-2022-2581)

It was discovered that Vim could be made to crash when parsing invalid line

numbers. An attacker could possbly use this to crash Vim and cause denial

of service. (CVE-2022-3099)

It was discovered that Vim uses freed memory when autocmd changes a mark.

An attacker could possbly use this to crash Vim and cause denial of

service. (CVE-2022-3256)

It was discovered the Vim uses an incorrect array index when window width

is negative. A loc...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical DoS memory corruption Ubuntu attack Vim

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
vim 2:7.4.1689-3ubuntu1.5+esm14
vim-athena 2:7.4.1689-3ubuntu1.5+esm14
vim-athena-py2 2:7.4.1689-3ubuntu1.5+esm14
vim-gnome 2:7.4.1689-3ubuntu1.5+esm14
vim-gnome-py2 2:7.4.1689-3ubuntu1.5+esm14
vim-gtk 2:7.4.1689-3ubuntu1.5+esm14
vim-gtk-py2 2:7.4.1689-3ubuntu1.5+esm14
vim-gtk3 2:7.4.1689-3ubuntu1.5+esm14
vim-gtk3-py2 2:7.4.1689-3ubuntu1.5+esm14
vim-nox 2:7.4.1689-3ubuntu1.5+esm14
vim-nox-py2 2:7.4.1689-3ubuntu1.5+esm14
vim-tiny 2:7.4.1689-3ubuntu1.5+esm14

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5775-1

CVE-2022-2345, CVE-2022-2581, CVE-2022-3099, CVE-2022-3256,

CVE-2022-3324, CVE-2022-3591

Severity
critical
Lowest
Low
Medium
High
Critical

December 12, 2022

Topics%20covered

Topics Covered

security advisory critical DoS memory corruption Ubuntu attack Vim

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.