Heap-based Buffer Overflow

🗓️ 15 Jan 2022 22:10:54Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 45 Views

vim.so heap-based buffer overflow vulnerabilit

Reporter	Title	Published	Views	Family All 125
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Vim-minimal Package Issues	8 Aug 202417:27	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PGAI Databases is affected by Multiple Vulnerabilities.	7 Apr 202613:55	–	ibm
ATTACKERKB	CVE-2021-3973	19 Nov 202112:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2021-005)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : vim (ALAS-2021-1728)	10 Dec 202100:00	–	nessus
Tenable Nessus	Amazon Linux AMI : vim (ALAS-2022-1557)	20 Jan 202200:00	–	nessus
Tenable Nessus	Debian DLA-2947-1 : vim - LTS security update	16 Mar 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-1297)	2 Mar 202200:00	–	nessus

Vulners

Node

AND

vim vimMatch2:8.2.1913-1+b2debian

vim vimMatch2:8.2.2434-3debian

debian debian_linuxMatch999

AND

vim vimMatch8.2.0357-r0os

vim vimMatch8.2.2677-r0os

vim vimMatch8.2.2968-r0os

vim vimMatch8.2.2559-r0os

vim vimMatch8.2.2677-r1os

vim vimMatch8.2.3437-r0os

vim vimMatch8.2.3567-r0os

vim vimMatch8.2.3082-r0os

vim vimMatch8.2.3300-r0os

vim vimMatch8.2.0-r0os

vim vimMatch8.2.2800-r0os

vim vimMatch8.2.3275-r0os

vim vimMatch8.2.0735-r0os

vim vimMatch8.2.2822-r1os

vim vimMatch8.2.3156-r0os

vim vimMatch8.2.2956-r0os

vim vimMatch8.2.2852-r0os

vim vimMatch8.2.3500-r0os

alpinelinux alpine_linuxMatchedge

AND

vim vimMatch8.2.3500-r0os

vim vimMatch8.2.3567-r0os

alpinelinux alpine_linuxMatch3.15

AND

vim vimMatch8.2.0735-r0os

vim vimMatch8.2.3437-r0os

alpinelinux alpine_linuxMatch3.12

AND

vim vimMatch8.2.3437-r0os

vim vimMatch8.2.2320-r0os

alpinelinux alpine_linuxMatch3.13

AND

vim vimMatch8.2.2956-r0os

vim vimMatch8.2.2852-r0os

vim vimMatch8.2.3437-r0os

alpinelinux alpine_linuxMatch3.14

AND

vim vimMatch2:8.0.0197-4+deb9u3debian

debian debian_linuxMatch9

AND

focal focalMatch2:8.1.2269-1ubuntu5debian

debian debian_linux

AND

google bionicMatch2:8.0.1453-1ubuntu1.4debian

google bionicMatch2:8.0.1453-1ubuntu1.3debian

google bionicMatch2:8.0.1453-1ubuntu1debian

debian debian_linux

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/03/msg00018.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-3973
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2LS2DXBTYOCWGAKFMBF3HTWWXPBEFL/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IH2LS2DXBTYOCWGAKFMBF3HTWWXPBEFL/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/
security	www.security.gentoo.org/glsa/202208-32
github	www.github.com/vim/vim/commit/615ddd5342b50a6878a907062aa471740bd9a847
huntr	www.huntr.dev/bounties/ce6e8609-77c6-4e17-b9fc-a2e5abed052e
openwall	www.openwall.com/lists/oss-security/2022/01/15/1

07 Nov 2023 22:32Current

3.3Low risk

Vulners AI Score3.3

CVSS 37.3 - 7.8

CVSS 29.3

EPSS0.01669