vim (SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS package vim, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (24)

• CVE-2022-3520 — CVSS 9.8 (critical): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
• CVE-2022-3591 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0789.
• CVE-2022-3491 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.
• CVE-2023-1127 — CVSS 7.8 (high): Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.
• CVE-2023-2610 — CVSS 7.8 (high): Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.
• CVE-2023-4733 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.1840.
• CVE-2023-4734 — CVSS 7.8 (high): Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
• CVE-2023-4735 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
• CVE-2023-4738 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
• CVE-2023-4752 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.1858.
• CVE-2023-4781 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
• CVE-2023-5535 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to v9.0.2010.
• CVE-2022-4141 — CVSS 7.8 (high): Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the…
• CVE-2022-4292 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0882.
• CVE-2023-0512 — CVSS 7.8 (high): Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
• CVE-2023-5344 — CVSS 7.5 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
• CVE-2023-1175 — CVSS 6.6 (medium): Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
• CVE-2023-1170 — CVSS 6.6 (medium): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
• CVE-2023-2426 — CVSS 5.5 (medium): Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
• CVE-2022-4293 — CVSS 5.5 (medium): Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
• CVE-2023-2609 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.
• CVE-2023-5441 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.
• CVE-2022-3705 — CVSS 5.0 (medium): A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file…
• CVE-2023-46246 — CVSS 4.0 (medium): Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in…