vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the lack of sanitization of the help.ccauses a heap-based buffer overflow which could result in an application crash.

References

www.openwall.com/lists/oss-security/2022/01/15/1

github.com/vim/vim/commit/bd228fd097b41a798f90944b5d1245eddd484142

huntr.dev/bounties/d8798584-a6c9-4619-b18f-001b9a6fca92

lists.debian.org/debian-lts-announce/2022/03/msg00018.html

lists.debian.org/debian-lts-announce/2022/11/msg00009.html

lists.fedoraproject.org/archives/list/[email protected]/message/DRPAI5JVZLI7WHWSBR6NWAPBQAYUQREW/

lists.fedoraproject.org/archives/list/[email protected]/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/

security-tracker.debian.org/tracker/CVE-2021-4019

security.gentoo.org/glsa/202208-32

cbl_mariner 2

openvas 25

nvd 1

alpinelinux 1

mageia 1

fedora 2

cve 1

debiancve 1

osv 8

cvelist 1

redhatcve 1

prion 1

huntr 1

cnvd 1

ubuntucve 1

nessus 36

rocky 2

photon 6

ubuntu 3

redhat 9

almalinux 1

cloudfoundry 1

oraclelinux 1

cloudlinux 2

ibm 2

rosalinux 1

suse 2

amazon 2

debian 2

gentoo 1

avleonov 1

cbl_mariner

CVE-2021-4019 affecting package vim 8.2.3668-4

2021-12-20 16:12:19

CVE-2021-4019 affecting package vim for versions less than 8.2.4081-1

2022-04-09 06:51:50

openvas

Fedora: Security Advisory for vim (FEDORA-2021-469afb66c9)

2021-12-04 00:00:00

Mageia: Security Advisory (MGASA-2021-0545)

2022-01-28 00:00:00

Ubuntu: Security Advisory (USN-6965-1)

2024-08-21 00:00:00

nvd

CVE-2021-4019

2021-12-01 10:15:07

alpinelinux

CVE-2021-4019

2021-12-01 10:15:07

mageia

Updated vim packages fix security vulnerability

2021-12-08 23:04:18

fedora

[SECURITY] Fedora 35 Update: vim-8.2.3717-1.fc35

2021-12-04 01:24:08

[SECURITY] Fedora 34 Update: vim-8.2.3755-1.fc34

2021-12-16 01:13:59

cve

CVE-2021-4019

2021-12-01 10:15:07

debiancve

CVE-2021-4019

2021-12-01 10:15:07

osv

CVE-2021-4019

2021-12-01 10:15:00

Moderate: vim security update

2022-02-01 20:12:46

vim vulnerabilities

2024-08-21 02:28:10

cvelist

CVE-2021-4019 Heap-based Buffer Overflow in vim/vim

2021-12-01 00:00:00

redhatcve

CVE-2021-4019

2021-12-01 18:16:53

prion

Heap overflow

2021-12-01 10:15:00

huntr

Heap-based Buffer Overflow in vim/vim

2021-11-23 22:16:23

cnvd

Vim has an unspecified vulnerability (CNVD-2022-05066)

2021-12-02 00:00:00

ubuntucve

CVE-2021-4019

2021-12-01 00:00:00

nessus

Photon OS 3.0: Vim PHSA-2021-3.0-0346

2022-01-10 00:00:00

Rocky Linux 8 : vim (RLSA-2022:366)

2022-02-09 00:00:00

Photon OS 4.0: Vim PHSA-2022-4.0-0144

2024-07-23 00:00:00

rocky

vim security update

2022-02-02 04:36:58

vim security update

2022-02-01 20:12:46

photon

Important Photon OS Security Update - PHSA-2021-0430

2021-12-21 00:00:00

Critical Photon OS Security Update - PHSA-2022-0144

2022-01-05 00:00:00

Important Photon OS Security Update - PHSA-2022-4.0-0144

2022-01-11 00:00:00

ubuntu

Vim vulnerabilities

2022-01-27 00:00:00

Vim vulnerabilities

2024-08-21 00:00:00

Vim vulnerabilities

2022-05-23 00:00:00

redhat

(RHSA-2022:0366) Moderate: vim security update

2022-02-01 20:12:46

(RHSA-2022:0476) Important: Red Hat OpenShift GitOps security update

2022-02-08 22:00:22

(RHSA-2022:0721) Moderate: OpenShift Logging bug fix and security update (5.3.5)

2022-03-01 14:01:24

almalinux

Moderate: vim security update

2022-02-01 20:12:46

cloudfoundry

USN-5247-1: Vim vulnerabilities | Cloud Foundry

2022-03-15 00:00:00

oraclelinux

vim security update

2022-02-03 00:00:00

cloudlinux

Fix of CVE: CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-3984, CVE-2021-4069

2021-12-15 14:28:46

Fix of CVE: CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069, CVE-2021-3984

2021-12-27 16:08:45

ibm

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak

2022-08-20 18:34:23

Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities

2023-06-08 21:56:13

rosalinux

Advisory ROSA-SA-2023-2214

2023-08-15 09:10:06

suse

Security update for vim (important)

2022-03-04 00:00:00

Security update for vim (important)

2022-06-16 00:00:00

amazon

Medium: vim

2022-01-18 21:38:00

Medium: vim

2022-01-18 20:12:00

debian

[SECURITY] [DLA 2947-1] vim security update

2022-03-11 22:50:56

[SECURITY] [DLA 3182-1] vim security update

2022-11-08 14:54:53

gentoo

Vim, gVim: Multiple Vulnerabilities

2022-08-21 00:00:00

avleonov

Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs

2022-12-30 18:03:13

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

EPSS

0.001

Percentile

41.7%

JSON

Related for VERACODE:33822