CVE-2021-3974: vim vim – CVSS 7.8 · Watchpost

← All vulnerabilities

CVE-2021-3974

ALTO 7.8CVE-2021-3974 · Published 19/11/2021 · updated 08/10/2026

Em resumo

CVE-2021-3974 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta vim (vim).
Chance de exploração nos próximos 30 dias (EPSS): 1.4%, maior que 71.8% das vulnerabilidades.
Correção: atualize para 8.2.3612 ou posterior.

Package	Affected versions	Patched versions
vim vim	`< 8.2.3612`	`8.2.3612`

Description

vim is vulnerable to Use After Free

References

openwall.com/lists/oss-security/2022/01/15/1 · Mailing List
vim/vim commit 64066b9 · Patch
huntr.dev/bounties/e402cb2c-8ec4-4828-a692-c95f8e0de6d4 · Exploit
lists.debian.org/debian-lts-announce/2022/03/msg00018.html · Mailing List
lists.debian.org/debian-lts-announce/2022/11/msg00009.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2LS2DXBTYOCWGAKFMBF3HTWWXPBEFL
security.gentoo.org/glsa/202208-32 · Third Party Advisory

Mais vulnerabilidades de vim

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free