vim (SUSE:Linux Enterprise Real Time 15 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Real Time 15 SP2 package vim, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (14)

• CVE-2022-0318 — CVSS 9.8 (critical): Heap-based Buffer Overflow in vim/vim prior to 8.2.
• CVE-2021-3872 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-3927 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-3928 — CVSS 7.8 (high): vim is vulnerable to Use of Uninitialized Variable
• CVE-2021-3984 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-4019 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-3778 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2022-0351 — CVSS 7.8 (high): Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
• CVE-2022-0361 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
• CVE-2022-0413 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 8.2.
• CVE-2021-3796 — CVSS 7.3 (high): vim is vulnerable to Use After Free
• CVE-2022-0319 — CVSS 5.5 (medium): Out-of-bounds Read in vim/vim prior to 8.2.
• CVE-2021-4193 — CVSS 5.5 (medium): vim is vulnerable to Out-of-bounds Read
• CVE-2021-46059: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation…