Published: 06/12/2021 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

It exists that vim incorrectly handled memory when opening and editing certain files. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service, or possibly achieve code execution with user privileges. (CVE-2021-3984)

Vulnerable Product	Search on Vulmon	Subscribe to Product
vim vim
fedoraproject fedora 34
fedoraproject fedora 35
debian debian linux 9.0
debian debian linux 10.0

Several security issues were fixed in Vim ...

vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3903) A flaw was found in vim A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability (CVE-2021-3 ...

Vim before version 823741 is vulnerable to a use after free through using freed memory in the open command ...

A flaw was found in vim A possible heap-based buffer overflow vulnerability allows an attacker to input a specially crafted file, leading to a crash or code execution The highest threat from this vulnerability is system availability (CVE-2021-4019) vim is vulnerable to Use After Free (CVE-2021-4069) A flaw was found in vim A possible heap-based ...

oss-sec mailing list archives   By Date By Thread </form>    Re: 3 new CVE's in vim   From: Alan Coopersmith <alancoopersmith () o ...

CWE-416 https://huntr.dev/bounties/0efd6d23-2259-4081-9ff1-3ade26907d74 https://github.com/vim/vim/commit/e031fe90cf2e375ce861ff5e5e281e4ad229ebb9 http://www.openwall.com/lists/oss-security/2022/01/15/1 https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html https://security.gentoo.org/glsa/202208-32 https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYB2LLNUFJUKJJ5HYCZ6MV3Z6YX3U5BN/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/https://nvd.nist.gov https://ubuntu.com/security/notices/USN-5247-1

CVE-2021-4069

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect