CVE-2021-3236: Null Pointer Dereference

Published Aug 11, 2023

Updated

vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the exbufferall method.

Affected Software

1 affected component

vim Vim=8.2.2348

Remediation

Patch Available

https://github.com/vim/vim/issues/7674

Event History

Aug 11, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2021-3236?

CVE-2021-3236 is a vulnerability affecting vim 8.2.2348 that allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method.

How severe is CVE-2021-3236?

CVE-2021-3236 has a severity rating of 5.5 (Medium).

How does CVE-2021-3236 affect Vim 8.2.2348?

CVE-2021-3236 affects Vim 8.2.2348 by enabling local attackers to exploit a null pointer dereference vulnerability, resulting in a denial of service (DoS) situation.

How can I mitigate CVE-2021-3236?

To mitigate CVE-2021-3236, it is recommended to update Vim to a version that is not vulnerable, once a patch or fixed version becomes available.

Where can I find more information about CVE-2021-3236?

More information about CVE-2021-3236 can be found in the references provided: [GitHub Issue](https://github.com/vim/vim/issues/7674) and [NetApp Advisory](https://security.netapp.com/advisory/ntap-20230915-0001/).