CVE-2021-4193

MEDIUM | Platform: macOS | Changelog

CVE Details

Description

vim is vulnerable to Out-of-bounds Read

CVSS 3.1 Score

Metric	Value
Base Score	5.5 (MEDIUM)
Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N`

Weakness

CWE-125

References

Apple Security Advisory
NVD Entry
http://seclists.org/fulldisclosure/2022/Jul/14 (Mailing List, Third Party Advisory)
http://seclists.org/fulldisclosure/2022/Mar/29 (Mailing List, Third Party Advisory)
http://seclists.org/fulldisclosure/2022/May/35 (Mailing List, Third Party Advisory)
http://www.openwall.com/lists/oss-security/2022/01/15/1 (Mailing List, Third Party Advisory)
https://github.com/vim/vim/commit/94f3192b03ed27474db80b4d3a409e107140738b (Patch, Third Party Advisory)
https://huntr.dev/bounties/92c1940d-8154-473f-84ce-0de43b0c2eb0 (Exploit, Patch, Third Party Advisory)
https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html (Mailing List, Third Party Advisory)
https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html (Mailing List, Third Party Advisory)