远程 CentOS Linux 9 主机上安装的多个程序包受到 vim-8.2.2637-14.el9 版本变更日志中提及的一个漏洞影响。

  - vim 8.2 之前版本中存在基于堆栈的缓冲区溢出漏洞 (CVE-2022-0629)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Out-of-bounds Read in vim/vim prior to 8.2. (CVE-2022-0319)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. (CVE-2022-0554)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0572)

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0629)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418. (CVE-2022-0685)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. (CVE-2022-0714)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. (CVE-2022-0729)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0629)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1579 advisory.

    A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and     leads to an out-of-bounds read. This flaw allows an attacker to input a specially crafted file, leading to     a crash or code execution. (CVE-2022-0393)

    A flaw was found in vim. The vulnerability occurs due to stack corruption when looking for spell     suggestions and leads to a stack buffer overflow. This flaw allows an attacker to input a specially     crafted file, leading to a crash or code execution. (CVE-2022-0408)

    A flaw was found in vim. The vulnerability occurs due to using freed memory when the substitute uses a     recursive function call, resulting in a use-after-free vulnerability. This flaw allows an attacker to     input a specially crafted file, leading to a crash or code execution. (CVE-2022-0413)

    A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer     overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code     execution. (CVE-2022-0417)

    A flaw was found in vim. The vulnerability occurs due to using freed memory which results in a use-after-     free vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or     code execution. (CVE-2022-0443)

    A flaw was found in vim that causes an out-of-range pointer offset vulnerability. This flaw allows an     attacker to input a specially crafted file, leading to a crash or code execution. (CVE-2022-0554)

    A heap-based buffer overflow flaw was found in vim's ex_retab() function of indent.c file. This flaw     occurs when repeatedly using :retab. This flaw allows an attacker to trick a user into opening a crafted     file triggering a heap-overflow. (CVE-2022-0572)

    A stack-based buffer overflow flaw was found in vim's ga_concat_shorten_esc() function of src/testing.c     file. This flaw allows an attacker to trick a user into opening a crafted file, triggering a stack-     overflow. This issue can lead to an application crash, causing a denial of service. (CVE-2022-0629)

    A flaw was found in vim. The vulnerability occurs due to a crash when using a special multi-byte character     and leads to an out-of-range vulnerability. This flaw allows an attacker to input a specially crafted     file, leading to a crash or code execution. (CVE-2022-0685)

    A NULL pointer dereference flaw was found in vim's find_ucmd() function of usercmd.c file. This flaw     allows an attacker to trick a user into opening a crafted file, triggering a NULL pointer dereference.
    This issue leads to an application crash, causing a denial of service. (CVE-2022-0696)

    A heap-buffer-overflow flaw was found in vim's win_lbr_chartabsize() function of charset.c file. The issue     occurs due to an incorrect 'vartabstop' value. This flaw allows an attacker to trick a user into opening a     specially crafted file, triggering a heap-overflow, and can cause an application to crash, eventually     leading to a denial of service. (CVE-2022-0714)

    A flaw was found in vim. The vulnerability occurs due to crashes within specific regexp patterns and     strings and leads to an out-of-range vulnerability. This flaw allows an attacker to input a specially     crafted file, leading to a crash or code execution. (CVE-2022-0729)

    A heap buffer overflow flaw was found in vim's suggest_try_change() function of the spellsuggest.c file.
    This flaw allows an attacker to trick a user into opening a crafted file, triggering a heap-overflow and     causing an application to crash, which leads to a denial of service. (CVE-2022-0943)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1805 advisory.

    A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and     leads to an out-of-bounds read. This flaw allows an attacker to input a specially crafted file, leading to     a crash or code execution. (CVE-2022-0393)

    A flaw was found in vim. The vulnerability occurs due to stack corruption when looking for spell     suggestions and leads to a stack buffer overflow. This flaw allows an attacker to input a specially     crafted file, leading to a crash or code execution. (CVE-2022-0408)

    A flaw was found in vim. The vulnerability occurs due to using freed memory when the substitute uses a     recursive function call, resulting in a use-after-free vulnerability. This flaw allows an attacker to     input a specially crafted file, leading to a crash or code execution. (CVE-2022-0413)

    A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer     overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code     execution. (CVE-2022-0417)

    A flaw was found in vim. The vulnerability occurs due to using freed memory which results in a use-after-     free vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or     code execution. (CVE-2022-0443)

    A flaw was found in vim that causes an out-of-range pointer offset vulnerability. This flaw allows an     attacker to input a specially crafted file, leading to a crash or code execution. (CVE-2022-0554)

    A heap-based buffer overflow flaw was found in vim's ex_retab() function of indent.c file. This flaw     occurs when repeatedly using :retab. This flaw allows an attacker to trick a user into opening a crafted     file triggering a heap-overflow. (CVE-2022-0572)

    A stack-based buffer overflow flaw was found in vim's ga_concat_shorten_esc() function of src/testing.c     file. This flaw allows an attacker to trick a user into opening a crafted file, triggering a stack-     overflow. This issue can lead to an application crash, causing a denial of service. (CVE-2022-0629)

    A flaw was found in vim. The vulnerability occurs due to a crash when using a special multi-byte character     and leads to an out-of-range vulnerability. This flaw allows an attacker to input a specially crafted     file, leading to a crash or code execution. (CVE-2022-0685)

    A NULL pointer dereference flaw was found in vim's find_ucmd() function of usercmd.c file. This flaw     allows an attacker to trick a user into opening a crafted file, triggering a NULL pointer dereference.
    This issue leads to an application crash, causing a denial of service. (CVE-2022-0696)

    A heap-buffer-overflow flaw was found in vim's win_lbr_chartabsize() function of charset.c file. The issue     occurs due to an incorrect 'vartabstop' value. This flaw allows an attacker to trick a user into opening a     specially crafted file, triggering a heap-overflow, and can cause an application to crash, eventually     leading to a denial of service. (CVE-2022-0714)

    A flaw was found in vim. The vulnerability occurs due to crashes within specific regexp patterns and     strings and leads to an out-of-range vulnerability. This flaw allows an attacker to input a specially     crafted file, leading to a crash or code execution. (CVE-2022-0729)

    A heap buffer overflow flaw was found in vim's suggest_try_change() function of the spellsuggest.c file.
    This flaw allows an attacker to trick a user into opening a crafted file, triggering a heap-overflow and     causing an application to crash, which leads to a denial of service. (CVE-2022-0943)

    A heap use-after-free vulnerability was found in Vim's utf_ptr2char() function of the src/mbyte.c file.
    This flaw occurs because vim is using a buffer line after it has been freed in the old regexp engine. This     flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-     after-free that causes an application to crash, possibly executing code and corrupting memory.
    (CVE-2022-1154)

    A heap buffer overflow flaw was found in vim's get_one_sourceline() function of scriptfile.c file. This     flaw occurs when source can read past the end of the copied line. This flaw allows an attacker to trick a     user into opening a crafted file, triggering a heap-overflow and causing an application to crash, which     leads to a denial of service. (CVE-2022-1160)

    A global heap buffer overflow vulnerability was found in vim's skip_range() function of the src/ex_docmd.c     file. This flaw occurs because vim uses an invalid pointer with V: in Ex mode. This flaw allows an     attacker to trick a user into opening a specially crafted file, triggering a heap buffer overflow that     causes an application to crash, leading to a denial of service. (CVE-2022-1381)

    A vulnerability was found in Vim. The issue occurs when using a number in a string for the lambda name,     triggering an out-of-range pointer offset vulnerability. This flaw allows an attacker to trick a user into     opening a crafted script containing an argument as a number and then using it as a string pointer to     access any memory location, causing an application to crash and possibly access some memory.
    (CVE-2022-1420)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the vim package has been released.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the vim-8.2.2637-14.el9 build changelog.

  - Stack-based Buffer Overflow in vim prior to 8.2 (CVE-2022-0629)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

因此，會受到 ALAS2-2022-1805 公告中所提及的多個弱點影響。

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在超出邊界讀取弱點。(CVE-2022-0393)

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在堆疊型緩衝區溢位弱點。(CVE-2022-0408、CVE-2022-0629)

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在釋放後使用弱點。(CVE-2022-0413、CVE-2022-0443)

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在堆積型緩衝區溢位弱點。(CVE-2022-0417)

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在使用超出範圍指標位移弱點。(CVE-2022-0554)

  - GitHub 存放庫 vim/vim 8.2 更早版本中存在堆積型緩衝區溢位弱點。(CVE-2022-0572)

  - GitHub 存放庫 vim/vim 8.2.4418 更舊版本中存在使用超出範圍指標位移弱點。(CVE-2022-0685)

  - GitHub 存放庫 vim/vim 8.2.4428 更舊版本中存在 NULL 指標解除參照。(CVE-2022-0696)

  - GitHub 存放庫 vim/vim 8.2.4436 更早版本中存在堆積型緩衝區溢位弱點。(CVE-2022-0714)

  - GitHub 存放庫 vim/vim 8.2.4440 更舊版本中存在使用超出範圍指標位移弱點。(CVE-2022-0729)

  - GitHub 存放庫 vim/vim 8.2.4563 更舊版本的 vim 中出現堆積型緩衝區溢位。(CVE-2022-0943)

  - GitHub 存放庫 vim/vim 8.2.4646 更舊版本的 utf_ptr2char 中存在釋放後使用弱點。(CVE-2022-1154)

  - GitHub 存放庫 vim/vim 8.2.4647 之前版本的 get_one_sourceline 中存在堆積型緩衝區溢位弱點。(CVE-2022-1160)

  - GitHub 存放庫 vim/vim 8.2.4763 之前版本的 skip_range 中存在全域堆積型緩衝區溢位弱點。此弱點能夠損毀軟體、繞過保護機制、修改記憶體，並可能造成遠端執行問題 (CVE-2022-1381)

  - GitHub 存放庫 vim/vim 8.2.4774 更舊版本中存在使用超出範圍指標位移弱點。(CVE-2022-1420)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

因此，會受到 ALAS-2022-1579 公告中所提及的多個弱點影響。

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在超出邊界讀取弱點。(CVE-2022-0393)

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在堆疊型緩衝區溢位弱點。(CVE-2022-0408、CVE-2022-0629)

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在釋放後使用弱點。(CVE-2022-0413、CVE-2022-0443)

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在堆積型緩衝區溢位弱點。(CVE-2022-0417)

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在使用超出範圍指標位移弱點。(CVE-2022-0554)

  - GitHub 存放庫 vim/vim 8.2 更早版本中存在堆積型緩衝區溢位弱點。(CVE-2022-0572)

  - GitHub 存放庫 vim/vim 8.2.4418 更舊版本中存在使用超出範圍指標位移弱點。(CVE-2022-0685)

  - GitHub 存放庫 vim/vim 8.2.4428 更舊版本中存在 NULL 指標解除參照。(CVE-2022-0696)

  - GitHub 存放庫 vim/vim 8.2.4436 更早版本中存在堆積型緩衝區溢位弱點。(CVE-2022-0714)

  - GitHub 存放庫 vim/vim 8.2.4440 更舊版本中存在使用超出範圍指標位移弱點。(CVE-2022-0729)

  - GitHub 存放庫 vim/vim 8.2.4563 更舊版本的 vim 中出現堆積型緩衝區溢位。(CVE-2022-0943)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - GitHub 存放庫 vim/vim 8.2 更舊版本中存在堆疊型緩衝區溢位弱點。(CVE-2022-0629)

請注意，Nessus 依賴供應商報告的套件存在。

遠端 CentOS Linux 9 主機上安裝的套件受到 vim-8.2.2637-14.el9 版本變更記錄中提及的弱點影響。

  - vim 8.2 更舊版本中存在堆疊型緩衝區溢位弱點 (CVE-2022-0629)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
191151	CentOS 9：vim-8.2.2637-14.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high
161887	EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1799)	Nessus	Huawei Local Security Checks	2022/6/6	2023/10/26	high
230005	Linux Distros Unpatched Vulnerability : CVE-2022-0629	Nessus	Misc.	2025/3/5	2025/3/5	high
159555	Amazon Linux AMI : vim (ALAS-2022-1579)	Nessus	Amazon Linux Local Security Checks	2022/4/6	2024/12/11	high
161934	Amazon Linux 2 : vim (ALAS-2022-1805)	Nessus	Amazon Linux Local Security Checks	2022/6/7	2024/12/11	high
203244	Photon OS 4.0: Vim PHSA-2022-4.0-0160	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	high
191151	CentOS 9 : vim-8.2.2637-14.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high
161934	Amazon Linux 2：vim (ALAS-2022-1805)	Nessus	Amazon Linux Local Security Checks	2022/6/7	2024/12/11	high
159555	Amazon Linux AMI：vim (ALAS-2022-1579)	Nessus	Amazon Linux Local Security Checks	2022/4/6	2024/12/11	high
230005	Linux Distros 未修補弱點：CVE-2022-0629	Nessus	Misc.	2025/3/5	2025/3/5	high
191151	CentOS 9：vim-8.2.2637-14.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high