CVE-2023-1264

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.(CVE-2023-1264)

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

• CVE-2023-1170: at the end of do_put() (ops.c), clamp the cursor column back to the line length (and recompute coladd under virtualedit=all) so a Visual block put past the new NUL no longer leaves the cursor pointing past end-of-line.
• CVE-2023-1175: in op_yank() (ops.c), when the yank starts inside a multi-cell tab under virtual editing, clamp bd.startspaces to 0 before incrementing startcol so a negative width can't drive the later block-yank copy out of bounds.
• CVE-2023-1264: in vgetorpeek() (getchar.c), guard the dead-character putcmdline()/unputcmdline() paths with cmdline_has_buffer() (new ex_getln.c helper) so a nested :open command with a NULL ccline.cmdbuff no longer dereferences it.

These are all security issues fixed in the gvim-9.0.1392-1.1 package on the GA media of openSUSE Tumbleweed.

This update for vim fixes the following issues:

Updated to version 9.0 with patch level 1443, fixes the following security problems

• CVE-2023-1264: Fixed NULL Pointer Dereference (bsc#1209042).
• CVE-2023-1355: Fixed NULL Pointer Dereference (bsc#1209187).
• CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).

This update for vim fixes the following issues:

Updated to version 9.0 with patch level 1572.

• CVE-2023-2426: Fixed Out-of-range Pointer Offset use (bsc#1210996).
• CVE-2023-2609: Fixed NULL Pointer Dereference (bsc#1211256).
• CVE-2023-2610: Fixed nteger Overflow or Wraparound (bsc#1211257).
• CVE-2023-1264: Fixed NULL Pointer Dereference (bsc#1209042).
• CVE-2023-1355: Fixed NULL Pointer Dereference (bsc#1209187).
• CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).

It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-47024, CVE-2023-0049, CVE-2023-0054, CVE-2023-0288, CVE-2023-0433)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-0051)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. (CVE-2023-1170, CVE-2023-1175)

It was discovered that Vim was not properly performing memory management
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-1264)