USN-5533-1: Vim vulnerability
26 July 2022
Vim could be made to crash, among other things, if it opened a specially crafted file.
Releases
Packages
- vim - Vi IMproved - enhanced vi editor
Details
It was discovered that Vim incorrectly handled memory access. If a
user were tricked into opening a specially crafted file, an attacker
could possibly use this issue to cause the corruption of sensitive
information, a crash, or arbitrary code execution.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
vim
-
2:7.4.1689-3ubuntu1.5+esm12
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-5995-1: vim-tiny, vim-gtk, vim-gui-common, vim-motif, vim-nox, vim-lesstif, vim-doc, vim-common, vim-athena, vim-gtk3, vim, vim-gnome, xxd, vim-runtime