According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Use After Free in GitHub repository vim/vim prior to 9.0.1840. (CVE-2023-4733)

  - Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. (CVE-2023-4734)

  - Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. (CVE-2023-4735)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. (CVE-2023-4738)

  - Use After Free in GitHub repository vim/vim prior to 9.0.1857. (CVE-2023-4750)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. (CVE-2023-4751)

  - Use After Free in GitHub repository vim/vim prior to 9.0.1858. (CVE-2023-4752)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. (CVE-2023-4781)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the vim package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. (CVE-2023-4738)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Use After Free in GitHub repository vim/vim prior to 9.0.1840. (CVE-2023-4733)

  - Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. (CVE-2023-4734)

  - Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. (CVE-2023-4735)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. (CVE-2023-4738)

  - Use After Free in GitHub repository vim/vim prior to 9.0.1857. (CVE-2023-4750)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. (CVE-2023-4751)

  - Use After Free in GitHub repository vim/vim prior to 9.0.1858. (CVE-2023-4752)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. (CVE-2023-4781)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. (CVE-2023-5344)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.
    (CVE-2023-5441)

  - Use After Free in GitHub repository vim/vim prior to v9.0.2010. (CVE-2023-5535)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-360 advisory.

    Use After Free in GitHub repository vim/vim prior to 9.0.1840. (CVE-2023-4733)

    Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. (CVE-2023-4734)

    Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. (CVE-2023-4735)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. (CVE-2023-4738)

    Use After Free in GitHub repository vim/vim prior to 9.0.1857. (CVE-2023-4750)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. (CVE-2023-4751)

    Use After Free in GitHub repository vim/vim prior to 9.0.1858. (CVE-2023-4752)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. (CVE-2023-4781)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3955-1 advisory.

    Security fixes:

    - CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004).
    - CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925).
    - CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924).
    - CVE-2023-4738: Fixed heap buffer overflow in vim_regsub_both (bsc#1214922).
    - CVE-2023-4752: Fixed heap use-after-free in function ins_compl_get_exp (bsc#1215006).
    - CVE-2023-4781: Fixed heap buffer overflow in function vim_regsub_both (bsc#1215033).

    Other fixes:

    - Update to version 9.0 with patch level 1894,       for the complete list of changes see https://github.com/vim/vim/compare/v9.0.1443...v9.0.1894
    - Use app icons generated from vimlogo.eps in the source tarball;
      add higher resolution icons of sizes 128x128, 256x256, and 512x512 as png sources

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Use After Free in GitHub repository vim/vim prior to 9.0.1840. (CVE-2023-4733)

  - Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. (CVE-2023-4734)

  - Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. (CVE-2023-4735)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. (CVE-2023-4738)

  - Use After Free in GitHub repository vim/vim prior to 9.0.1857. (CVE-2023-4750)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. (CVE-2023-4751)

  - Use After Free in GitHub repository vim/vim prior to 9.0.1858. (CVE-2023-4752)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. (CVE-2023-4781)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4738 advisory.

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. (CVE-2023-4738)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2266 advisory.

    vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service     (DoS) via the ex_buffer_all method. (CVE-2021-3236)

    Use After Free in GitHub repository vim/vim prior to 9.0.1840. (CVE-2023-4733)

    Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. (CVE-2023-4734)

    Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. (CVE-2023-4735)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. (CVE-2023-4738)

    Use After Free in GitHub repository vim/vim prior to 9.0.1857. (CVE-2023-4750)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. (CVE-2023-4751)

    Use After Free in GitHub repository vim/vim prior to 9.0.1858. (CVE-2023-4752)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. (CVE-2023-4781)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
188741	EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2023-3514)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
203555	Photon OS 5.0: Vim PHSA-2023-5.0-0091	Nessus	PhotonOS Local Security Checks	2024/7/23	2026/10/14	high
226764	Linux Distros Unpatched Vulnerability : CVE-2023-4738	Nessus	Misc.	2025/3/5	2026/11/7	high
188859	EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-3320)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
182464	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-360)	Nessus	Amazon Linux Local Security Checks	2023/10/3	2024/12/11	high
182484	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2023:3955-1)	Nessus	SuSE Local Security Checks	2023/10/4	2026/6/26	high
188896	EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-3233)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
332471	Photon OS 5.0: Vim PHSA-2023-5.0-91-0091	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/11/2	high
182162	CBL Mariner 2.0 Security Update: vim (CVE-2023-4738)	Nessus	MarinerOS Local Security Checks	2023/9/28	2025/2/10	high
188797	EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-3288)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
182631	Amazon Linux 2 : vim (ALAS-2023-2266)	Nessus	Amazon Linux Local Security Checks	2023/10/5	2024/12/11	high
188860	EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2023-3486)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
204577	Photon OS 4.0: Vim PHSA-2023-4.0-0467	Nessus	PhotonOS Local Security Checks	2024/7/24	2026/11/2	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high