Lucene search

K
nvd[email protected]NVD:CVE-2021-3968
HistoryNov 19, 2021 - 12:15 p.m.

CVE-2021-3968

2021-11-1912:15:09
CWE-787
CWE-122
web.nvd.nist.gov
5
vim vulnerability
heap-based buffer overflow
cve-2021-3968

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

CVSS3

8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

68.9%

vim is vulnerable to Heap-based Buffer Overflow

Affected configurations

Nvd
Node
vimvimRange8.2.34308.2.3610
Node
fedoraprojectfedoraMatch34
OR
fedoraprojectfedoraMatch35

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

CVSS3

8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

68.9%