Test ID:	1.3.6.1.4.1.25623.1.1.12.2022.5507.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-5507-1)
Summary:	The remote host is missing an update for the 'vim' package(s) announced via the USN-5507-1 advisory.
Description:	Summary: The remote host is missing an update for the 'vim' package(s) announced via the USN-5507-1 advisory. Vulnerability Insight: It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the program to crash, use unexpected values, or execute arbitrary code. (CVE-2022-1968) It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the corruption of sensitive information, a crash, or arbitrary code execution. (CVE-2022-1897, CVE-2022-1942) Affected Software/OS: 'vim' package(s) on Ubuntu 16.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1897 https://huntr.dev/bounties/82c12151-c283-40cf-aa05-2e39efa89118 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/ http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://security.gentoo.org/glsa/202208-32 https://security.gentoo.org/glsa/202305-16 https://github.com/vim/vim/commit/338f1fc0ee3ca929387448fe464579d6113fa76a https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html Common Vulnerability Exposure (CVE) ID: CVE-2022-1942 https://huntr.dev/bounties/67ca4d3b-9175-43c1-925c-72a7091bc071 https://github.com/vim/vim/commit/71223e2db87c2bf3b09aecb46266b56cda26191d Common Vulnerability Exposure (CVE) ID: CVE-2022-1968 https://huntr.dev/bounties/949090e5-f4ea-4edf-bd79-cd98f0498a5b https://github.com/vim/vim/commit/409510c588b1eec1ae33511ae97a21eb8e110895 https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.