CVE-2021-4136

🗓️ 19 Dec 2021 17:00:10Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 190 Views

vim vulnerability CVE-2021-4136 Heap-based Buffer Overflo

Reporter	Title	Published	Views	Family All 91
Huntr	Heap-based Buffer Overflow in vim/vim	17 Dec 202116:12	–	huntr
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues	8 Aug 202417:27	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PGAI Databases is affected by Multiple Vulnerabilities.	7 Apr 202613:55	–	ibm
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-014)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim, --advisory ALAS2-2022-1743 (ALAS-2022-1743)	14 Feb 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2022-1557)	20 Jan 202200:00	–	nessus
Tenable Nessus	GLSA-202208-32 : Vim, gVim: Multiple Vulnerabilities	21 Aug 202200:00	–	nessus
Tenable Nessus	macOS 12.x < 12.3 (HT213183)	21 Mar 202200:00	–	nessus

NVD

Node

vim vimRange<8.2.3847

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

Node

apple mac_os_xRange10.15–10.15.7

apple mac_os_xMatch10.15.7-

apple mac_os_xMatch10.15.7security_update_2020

apple mac_os_xMatch10.15.7security_update_2020-001

apple mac_os_xMatch10.15.7security_update_2020-005

apple mac_os_xMatch10.15.7security_update_2020-007

apple mac_os_xMatch10.15.7security_update_2021-001

apple mac_os_xMatch10.15.7security_update_2021-002

apple mac_os_xMatch10.15.7security_update_2021-003

apple mac_os_xMatch10.15.7security_update_2021-006

apple mac_os_xMatch10.15.7security_update_2021-007

apple mac_os_xMatch10.15.7security_update_2021-008

apple mac_os_xMatch10.15.7security_update_2022-001

apple mac_os_xMatch10.15.7security_update_2022-002

apple mac_os_xMatch10.15.7security_update_2022-003

apple mac_os_xMatch10.15.7security_update_2022-004

apple mac_os_xMatch10.15.7supplemental_update

apple macosRange11.0–11.6.6

apple macosRange12.0–12.3

[
  {
    "product": "vim/vim",
    "vendor": "vim",
    "versions": [
      {
        "lessThan": "8.2.3846",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202208-32
support	www.support.apple.com/kb/HT213183
support	www.support.apple.com/kb/HT213256
huntr	www.huntr.dev/bounties/5c6b93c1-2d27-4e98-a931-147877b8c938
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/
seclists	www.seclists.org/fulldisclosure/2022/Jul/14
openwall	www.openwall.com/lists/oss-security/2022/01/15/1
github	www.github.com/vim/vim/commit/605ec91e5a7330d61be313637e495fa02a6dc264
seclists	www.seclists.org/fulldisclosure/2022/May/35
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/

21 Nov 2024 06:36Current

8.3High risk

Vulners AI Score8.3

CVSS 26.8

CVSS 3.17.8

CVSS 37.3

EPSS0.00301