GoogleOSV:CVE-2021-3903CVE-2021-3903
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
20.8%
vim is vulnerable to Heap-based Buffer Overflow
| CPE | Name | Operator | Version |
|---|---|---|---|
| vim | eq | 8.2.2303-r2 | |
| vim | eq | 7.4-r3 | |
| vim | eq | 8.2.0-r0 | |
| vim | eq | 8.0.1137-r0 | |
| vim | eq | 8.0.0187-r0 | |
| vim | eq | 7.3.515-r0 | |
| vim | eq | 8.2.3437-r1 | |
| vim | eq | 8.2.3082-r0 | |
| vim | eq | 7.4-r1 | |
| vim | eq | 7.3.401-r0 |
References
www.openwall.com/lists/oss-security/2022/01/15/1
github.com/vim/vim/commit/777e7c21b7627be80961848ac560cb0a9978ff43
huntr.dev/bounties/35738a4f-55ce-446c-b836-2fb0b39625f8
lists.debian.org/debian-lts-announce/2022/06/msg00014.html
lists.fedoraproject.org/archives/list/[email protected]/message/BN4EX7BPQU7RP6PXCNCSDORUZBXQ4JUH/
lists.fedoraproject.org/archives/list/[email protected]/message/DU26T75PYA3OF7XJGNKMT2ZCQEU4UKP5/
lists.fedoraproject.org/archives/list/[email protected]/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
20.8%