CVE-2021-4136 Heap-based Buffer Overflow in vim/vim

🗓️ 19 Dec 2021 17:00:10Reported by @huntrdevType

Heap-based Buffer Overflow in vi

Reporter	Title	Published	Views	Family All 94
Huntr	Heap-based Buffer Overflow in vim/vim	17 Dec 202116:12	–	huntr
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues	8 Aug 202417:27	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PGAI Databases is affected by Multiple Vulnerabilities.	7 Apr 202613:55	–	ibm
ATTACKERKB	CVE-2021-4136	19 Dec 202117:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-014)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim, --advisory ALAS2-2022-1743 (ALAS-2022-1743)	14 Feb 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2022-1557)	20 Jan 202200:00	–	nessus
Tenable Nessus	GLSA-202208-32 : Vim, gVim: Multiple Vulnerabilities	21 Aug 202200:00	–	nessus

[
  {
    "product": "vim/vim",
    "vendor": "vim",
    "versions": [
      {
        "lessThan": "8.2.3846",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/kb/HT213256
support	www.support.apple.com/kb/HT213183
seclists	www.seclists.org/fulldisclosure/2022/Jul/14
support	www.support.apple.com/kb/HT213343
seclists	www.seclists.org/fulldisclosure/2022/May/35
github	www.github.com/vim/vim/commit/605ec91e5a7330d61be313637e495fa02a6dc264
seclists	www.seclists.org/fulldisclosure/2022/Mar/29
huntr	www.huntr.dev/bounties/5c6b93c1-2d27-4e98-a931-147877b8c938
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/
security	www.security.gentoo.org/glsa/202208-32

21 Aug 2022 07:07Current

8.8High risk

Vulners AI Score8.8

CVSS 37.3

EPSS0.01831

CWE-122