CVE-2021-4193

Published: Dec 31, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

vim is vulnerable to Out-of-bounds Read

Affected (20)

Products: Vim: Vim · Fedoraproject: Fedora · Debian: Debian Linux · +1 more

Show all products

Vim: Vim · Fedoraproject: Fedora · Debian: Debian Linux · Apple: Mac Os X, Macos

1 product

1 product

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vim Vim	Before 8.2.3950

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration D

16 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.15.7
Apple Mac Os X	Version 10.15.7 security_update_2020-001
Apple Mac Os X	Version 10.15.7 security_update_2021-001
Apple Mac Os X	Version 10.15.7 security_update_2021-002
Apple Mac Os X	Version 10.15.7 security_update_2021-003
Apple Mac Os X	Version 10.15.7 security_update_2021-004
Apple Mac Os X	Version 10.15.7 security_update_2021-005
Apple Mac Os X	Version 10.15.7 security_update_2021-006
Apple Mac Os X	Version 10.15.7 security_update_2021-007
Apple Mac Os X	Version 10.15.7 security_update_2021-008
Apple Mac Os X	Version 10.15.7 security_update_2022-001
Apple Mac Os X	Version 10.15.7 security_update_2022-002
Apple Mac Os X	Version 10.15.7 security_update_2022-003
Apple Macos	Before 12.3
Apple Macos	From 11.0 to 11.6.6
Apple Macos	Version 10.15.7 security_update_2022-004

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (26)

http://seclists.org/fulldisclosure/2022/Jul/14

Source: security@huntr.dev

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Mar/29

Source: security@huntr.dev

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/35

Source: security@huntr.dev

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/01/15/1

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://github.com/vim/vim/commit/94f3192b03ed27474db80b4d3a409e107140738b

Source: security@huntr.dev

PatchThird Party Advisory

https://huntr.dev/bounties/92c1940d-8154-473f-84ce-0de43b0c2eb0

Source: security@huntr.dev

ExploitPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/

Source: security@huntr.dev

https://security.gentoo.org/glsa/202208-32

Source: security@huntr.dev

Third Party Advisory

https://support.apple.com/kb/HT213183

Source: security@huntr.dev

Release NotesThird Party Advisory

https://support.apple.com/kb/HT213256

Source: security@huntr.dev

Third Party Advisory

https://support.apple.com/kb/HT213343

Source: security@huntr.dev

Third Party Advisory

http://seclists.org/fulldisclosure/2022/Jul/14

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Mar/29

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/35

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/01/15/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://github.com/vim/vim/commit/94f3192b03ed27474db80b4d3a409e107140738b

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://huntr.dev/bounties/92c1940d-8154-473f-84ce-0de43b0c2eb0

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202208-32

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213183

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://support.apple.com/kb/HT213256

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT213343

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.