CVE-2021-3974: vim vim – CVSS 7.8 · Watchpost

← All vulnerabilities

CVE-2021-3974

ALTO 7.8CVE-2021-3974 · Published 19/11/2021 · updated 08/10/2026

In breve

CVE-2021-3974 è una vulnerabilità ALTO (CVSS 7.8) che riguarda vim (vim).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 71.8% delle vulnerabilità.
Correzione: aggiornare a 8.2.3612 o successiva.

Package	Affected versions	Patched versions
vim vim	`< 8.2.3612`	`8.2.3612`

Description

vim is vulnerable to Use After Free

References

openwall.com/lists/oss-security/2022/01/15/1 · Mailing List
vim/vim commit 64066b9 · Patch
huntr.dev/bounties/e402cb2c-8ec4-4828-a692-c95f8e0de6d4 · Exploit
lists.debian.org/debian-lts-announce/2022/03/msg00018.html · Mailing List
lists.debian.org/debian-lts-announce/2022/11/msg00009.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2LS2DXBTYOCWGAKFMBF3HTWWXPBEFL
security.gentoo.org/glsa/202208-32 · Third Party Advisory

Altre vulnerabilità di vim

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free