CVE-2021-46059
A Pointer Dereference vulnerability exists in Vim 8.2.3883 via the vim_regexec_multi function at...
CVE-2021-46059 has been rejected by its source and should not be treated as a live vulnerability, published January 7, 2022. Fixed in vim 8.2.4173-r0.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
8.2.4173-r0vim +74 more
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vimAlpine:v3.12 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.13 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.14 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.15 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.16 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.17 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.18 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.19 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.20 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.21 | before 8.2.4173-r0 | 8.2.4173-r0 |
Show 65 moreShow less
| Package | Affected | Fixed |
|---|---|---|
vimAlpine:v3.22 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.23 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimAlpine:v3.24 | before 8.2.4173-r0 | 8.2.4173-r0 |
vimSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Manager Proxy 4.1 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Manager Retail Branch Server 4.1 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Manager Server 4.1 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Micro 5.0 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Micro 5.1 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Enterprise Storage 6 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Enterprise Storage 7 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Micro 5.2 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Manager Proxy 4.1 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Manager Retail Branch Server 4.1 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Manager Server 4.1 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Micro 5.1 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Linux Enterprise Micro 5.2 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Enterprise Storage 6 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:Enterprise Storage 7 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimopenSUSE:Leap 15.3 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimopenSUSE:Leap 15.4 From an advisory covering 45 CVEs | before 8.2.5038-150000.5.21.1 | 8.2.5038-150000.5.21.1 |
vimSUSE:OpenStack Cloud 9 From an advisory covering 104 CVEs | before 9.0.0814-17.9.1 | 9.0.0814-17.9.1 |
vimSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 104 CVEs | before 9.0.0814-17.9.1 | 9.0.0814-17.9.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 104 CVEs | before 9.0.0814-17.9.1 | 9.0.0814-17.9.1 |
vimSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 104 CVEs | before 9.0.0814-17.9.1 | 9.0.0814-17.9.1 |
vimSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 104 CVEs | before 9.0.0814-17.9.1 | 9.0.0814-17.9.1 |
vimSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 104 CVEs | before 9.0.0814-17.9.1 | 9.0.0814-17.9.1 |
vimSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 104 CVEs | before 9.0.0814-17.9.1 | 9.0.0814-17.9.1 |
vimSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 104 CVEs | before 9.0.0814-17.9.1 | 9.0.0814-17.9.1 |
vimopenSUSE:Leap 15.3 From an advisory covering 14 CVEs | before 8.0.1568-5.17.1 | 8.0.1568-5.17.1 |
vimopenSUSE:Tumbleweed From an advisory covering 84 CVEs | before 9.0.0453-2.1 | 9.0.0453-2.1 |
What each source reports
CVE ListNo score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2021-46059- Updated
- 2026-11-02
EUVDEUVD-2021-32763No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
EUVD-2021-32763- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g8cq-3xc6-hg2jNo score
A Pointer Dereference vulnerability exists in Vim 8.2.3883 via the vim_regexec_multi function at...
A Pointer Dereference vulnerability exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which causes a denial of service.
- Record
GHSA-g8cq-3xc6-hg2j- Weakness
- CWE-476
- Updated
- 2026-11-02
NVDNo score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2021-46059- Updated
- 2026-11-02
OSVALPINE-CVE-2021-46059No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
ALPINE-CVE-2021-46059- Updated
- 2026-11-03
OSVNo score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2021-46059- Updated
- 2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2022:0736-1No score
Security update for vim
This update for vim fixes the following issues:
- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).
- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).
- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).
- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).
- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).
- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).
- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).
- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).
- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).
- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).
- Record
openSUSE-SU-2022:0736-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12337-1No score
gvim-9.0.0453-2.1 on GA media
These are all security issues fixed in the gvim-9.0.0453-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12337-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0736-1No score
Security update for vim
This update for vim fixes the following issues:
- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).
- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).
- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).
- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).
- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).
- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).
- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).
- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).
- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).
- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).
- Record
SUSE-SU-2022:0736-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0736-2No score
Security update for vim
This update for vim fixes the following issues:
- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).
- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).
- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).
- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).
- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).
- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).
- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).
- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).
- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).
- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).
- Record
SUSE-SU-2022:0736-2- Updated
- 2026-11-02
OSVSUSE-SU-2022:2102-1No score
Security update for vim
This update for vim fixes the following issues:
- CVE-2017-17087: Fixed information leak via .swp files (bsc#1070955).
- CVE-2021-3875: Fixed heap-based buffer overflow (bsc#1191770).
- CVE-2021-3903: Fixed heap-based buffer overflow (bsc#1192167).
- CVE-2021-3968: Fixed heap-based buffer overflow (bsc#1192902).
- CVE-2021-3973: Fixed heap-based buffer overflow (bsc#1192903).
- CVE-2021-3974: Fixed use-after-free (bsc#1192904).
- CVE-2021-4069: Fixed use-after-free in ex_open()in src/ex_docmd.c (bsc#1193466).
- CVE-2021-4136: Fixed heap-based buffer overflow (bsc#1193905).
- CVE-2021-4166: Fixed out-of-bounds read (bsc#1194093).
- CVE-2021-4192: Fixed use-after-free (bsc#1194217).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2022-0128: Fixed out-of-bounds read (bsc#1194388).
- CVE-2022-0213: Fixed heap-based buffer overflow (bsc#1194885).
- CVE-2022-0261: Fixed heap-based buffer overflow (bsc#1194872).
- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2022-0359: Fixed heap-based buffer overflow in init_ccline() in ex_getln.c (bsc#1195203).
- CVE-2022-0392: Fixed heap-based buffer overflow (bsc#1195332).
- CVE-2022-0407: Fixed heap-based buffer overflow (bsc#1195354).
- CVE-2022-0696: Fixed NULL pointer dereference (bsc#1196361).
- CVE-2022-1381: Fixed global heap buffer overflow in skip_range (bsc#1198596).
- CVE-2022-1420: Fixed out-of-range pointer offset (bsc#1198748).
- CVE-2022-1616: Fixed use-after-free in append_command (bsc#1199331).
- CVE-2022-1619: Fixed heap-based Buffer Overflow in function cmdline_erase_chars (bsc#1199333).
- CVE-2022-1620: Fixed NULL pointer dereference in function vim_regexec_string (bsc#1199334).
- CVE-2022-1733: Fixed heap-based buffer overflow in cindent.c (bsc#1199655).
- CVE-2022-1735: Fixed heap-based buffer overflow (bsc#1199651).
- CVE-2022-1771: Fixed stack exhaustion (bsc#1199693).
- CVE-2022-1785: Fixed out-of-bounds write (bsc#1199745).
- CVE-2022-1796: Fixed use-after-free in find_pattern_in_path (bsc#1199747).
- CVE-2022-1851: Fixed out-of-bounds read (bsc#1199936).
- CVE-2022-1897: Fixed out-of-bounds write (bsc#1200010).
- CVE-2022-1898: Fixed use-after-free (bsc#1200011).
- CVE-2022-1927: Fixed buffer over-read (bsc#1200012).
- Record
SUSE-SU-2022:2102-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:4619-1No score
Security update for vim
This update for vim fixes the following issues:
Updated to version 9.0.0814:
- Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
- Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
- Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
- Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
- Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
- Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
- Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
- Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
- Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
- Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
- Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
- Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
- Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
- Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
- Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- Fixing bsc#1200884 Vim: Error on startup
- Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
- Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
- Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
- Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
- Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
- Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
- Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
- Fixing bsc#1201620 vim: SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
- Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
- Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
- Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
- Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
- Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
- Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
- Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
- Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
- Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
- Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
- Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
- Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
- Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
- Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
- Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
- Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
- Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
- Fixing bsc#1201154 VUL-1:…
- Record
SUSE-SU-2022:4619-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
nvd.nist.gov/vuln/detail/CVE-2021-46059
huntr.dev/bounties/a9b015e2-59e3-4ed9-8812-d9021e40b8f2
lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM
github.com/advisories/GHSA-g8cq-3xc6-hg2j
security.alpinelinux.org/vuln/CVE-2021-46059
suse.com/support/update/announcement/2022/suse-su-20220736-1
Show 194 moreShow less
bugzilla.suse.com/1190533
bugzilla.suse.com/1190570
bugzilla.suse.com/1191893
bugzilla.suse.com/1192478
bugzilla.suse.com/1192481
bugzilla.suse.com/1193294
bugzilla.suse.com/1193298
bugzilla.suse.com/1194216
bugzilla.suse.com/1194556
bugzilla.suse.com/1195004
bugzilla.suse.com/1195066
bugzilla.suse.com/1195126
bugzilla.suse.com/1195202
bugzilla.suse.com/1195356
suse.com/security/cve/CVE-2021-3778
suse.com/security/cve/CVE-2021-3796
suse.com/security/cve/CVE-2021-3872
suse.com/security/cve/CVE-2021-3927
suse.com/security/cve/CVE-2021-3928
suse.com/security/cve/CVE-2021-3984
suse.com/security/cve/CVE-2021-4019
suse.com/security/cve/CVE-2021-4193
suse.com/security/cve/CVE-2021-46059
suse.com/security/cve/CVE-2022-0318
suse.com/security/cve/CVE-2022-0319
suse.com/security/cve/CVE-2022-0351
suse.com/security/cve/CVE-2022-0361
suse.com/security/cve/CVE-2022-0413
suse.com/support/update/announcement/2022/suse-su-20220736-2
suse.com/support/update/announcement/2022/suse-su-20222102-1
bugzilla.suse.com/1070955
bugzilla.suse.com/1191770
bugzilla.suse.com/1192167
bugzilla.suse.com/1192902
bugzilla.suse.com/1192903
bugzilla.suse.com/1192904
bugzilla.suse.com/1193466
bugzilla.suse.com/1193905
bugzilla.suse.com/1194093
bugzilla.suse.com/1194217
bugzilla.suse.com/1194388
bugzilla.suse.com/1194872
bugzilla.suse.com/1194885
bugzilla.suse.com/1195203
bugzilla.suse.com/1195332
bugzilla.suse.com/1195354
bugzilla.suse.com/1196361
bugzilla.suse.com/1198596
bugzilla.suse.com/1198748
bugzilla.suse.com/1199331
bugzilla.suse.com/1199333
bugzilla.suse.com/1199334
bugzilla.suse.com/1199651
bugzilla.suse.com/1199655
bugzilla.suse.com/1199693
bugzilla.suse.com/1199745
bugzilla.suse.com/1199747
bugzilla.suse.com/1199936
bugzilla.suse.com/1200010
bugzilla.suse.com/1200011
bugzilla.suse.com/1200012
suse.com/security/cve/CVE-2017-17087
suse.com/security/cve/CVE-2021-3875
suse.com/security/cve/CVE-2021-3903
suse.com/security/cve/CVE-2021-3968
suse.com/security/cve/CVE-2021-3973
suse.com/security/cve/CVE-2021-3974
suse.com/security/cve/CVE-2021-4069
suse.com/security/cve/CVE-2021-4136
suse.com/security/cve/CVE-2021-4166
suse.com/security/cve/CVE-2021-4192
suse.com/security/cve/CVE-2022-0128
suse.com/security/cve/CVE-2022-0213
suse.com/security/cve/CVE-2022-0261
suse.com/security/cve/CVE-2022-0359
suse.com/security/cve/CVE-2022-0392
suse.com/security/cve/CVE-2022-0407
suse.com/security/cve/CVE-2022-0696
suse.com/security/cve/CVE-2022-1381
suse.com/security/cve/CVE-2022-1420
suse.com/security/cve/CVE-2022-1616
suse.com/security/cve/CVE-2022-1619
suse.com/security/cve/CVE-2022-1620
suse.com/security/cve/CVE-2022-1733
suse.com/security/cve/CVE-2022-1735
suse.com/security/cve/CVE-2022-1771
suse.com/security/cve/CVE-2022-1785
suse.com/security/cve/CVE-2022-1796
suse.com/security/cve/CVE-2022-1851
suse.com/security/cve/CVE-2022-1897
suse.com/security/cve/CVE-2022-1898
suse.com/security/cve/CVE-2022-1927
suse.com/support/update/announcement/2022/suse-su-20224619-1
bugzilla.suse.com/1173256
bugzilla.suse.com/1174564
bugzilla.suse.com/1176549
bugzilla.suse.com/1182324
bugzilla.suse.com/1200270
bugzilla.suse.com/1200697
bugzilla.suse.com/1200698
bugzilla.suse.com/1200700
bugzilla.suse.com/1200701
bugzilla.suse.com/1200732
bugzilla.suse.com/1200884
bugzilla.suse.com/1200902
bugzilla.suse.com/1200903
bugzilla.suse.com/1200904
bugzilla.suse.com/1201132
bugzilla.suse.com/1201133
bugzilla.suse.com/1201134
bugzilla.suse.com/1201135
bugzilla.suse.com/1201136
bugzilla.suse.com/1201150
bugzilla.suse.com/1201151
bugzilla.suse.com/1201152
bugzilla.suse.com/1201153
bugzilla.suse.com/1201154
bugzilla.suse.com/1201155
bugzilla.suse.com/1201249
bugzilla.suse.com/1201356
bugzilla.suse.com/1201359
bugzilla.suse.com/1201363
bugzilla.suse.com/1201620
bugzilla.suse.com/1201863
bugzilla.suse.com/1202046
bugzilla.suse.com/1202049
bugzilla.suse.com/1202050
bugzilla.suse.com/1202051
bugzilla.suse.com/1202414
bugzilla.suse.com/1202420
bugzilla.suse.com/1202421
bugzilla.suse.com/1202511
bugzilla.suse.com/1202512
bugzilla.suse.com/1202515
bugzilla.suse.com/1202552
bugzilla.suse.com/1202599
bugzilla.suse.com/1202687
bugzilla.suse.com/1202689
bugzilla.suse.com/1202862
bugzilla.suse.com/1202962
bugzilla.suse.com/1203110
bugzilla.suse.com/1203152
bugzilla.suse.com/1203155
bugzilla.suse.com/1203194
bugzilla.suse.com/1203272
suse.com/security/cve/CVE-2009-0316
suse.com/security/cve/CVE-2016-1248
suse.com/security/cve/CVE-2017-5953
suse.com/security/cve/CVE-2017-6349
suse.com/security/cve/CVE-2017-6350
suse.com/security/cve/CVE-2022-1720
suse.com/security/cve/CVE-2022-1968
suse.com/security/cve/CVE-2022-2124
suse.com/security/cve/CVE-2022-2125
suse.com/security/cve/CVE-2022-2126
suse.com/security/cve/CVE-2022-2129
suse.com/security/cve/CVE-2022-2175
suse.com/security/cve/CVE-2022-2182
suse.com/security/cve/CVE-2022-2183
suse.com/security/cve/CVE-2022-2206
suse.com/security/cve/CVE-2022-2207
suse.com/security/cve/CVE-2022-2208
suse.com/security/cve/CVE-2022-2210
suse.com/security/cve/CVE-2022-2231
suse.com/security/cve/CVE-2022-2257
suse.com/security/cve/CVE-2022-2264
suse.com/security/cve/CVE-2022-2284
suse.com/security/cve/CVE-2022-2285
suse.com/security/cve/CVE-2022-2286
suse.com/security/cve/CVE-2022-2287
suse.com/security/cve/CVE-2022-2304
suse.com/security/cve/CVE-2022-2343
suse.com/security/cve/CVE-2022-2344
suse.com/security/cve/CVE-2022-2345
suse.com/security/cve/CVE-2022-2522
suse.com/security/cve/CVE-2022-2571
suse.com/security/cve/CVE-2022-2580
suse.com/security/cve/CVE-2022-2581
suse.com/security/cve/CVE-2022-2598
suse.com/security/cve/CVE-2022-2816
suse.com/security/cve/CVE-2022-2817
suse.com/security/cve/CVE-2022-2819
suse.com/security/cve/CVE-2022-2845
suse.com/security/cve/CVE-2022-2849
suse.com/security/cve/CVE-2022-2862
suse.com/security/cve/CVE-2022-2874
suse.com/security/cve/CVE-2022-2889
suse.com/security/cve/CVE-2022-2923
suse.com/security/cve/CVE-2022-2946
suse.com/security/cve/CVE-2022-2980
suse.com/security/cve/CVE-2022-2982
suse.com/security/cve/CVE-2022-3016
suse.com/security/cve/CVE-2022-3037
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FDNZ3N5S7UGKPUUKPGOQQGPJJK3YTW37
Left out here: 39 references and the rest of 1 source description. The JSON record has them.