CVE-2021-3872: Heap-based Buffer Overflow in vim/vim
Last updated 24 July 2024
Other sources
vim is vulnerable to Heap-based Buffer Overflow
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-3872?
CVE-2021-3872 is a vulnerability in vim that allows for a heap-based buffer overflow.
How severe is CVE-2021-3872?
CVE-2021-3872 has a severity rating of 7.8, which is considered high.
What software is affected by CVE-2021-3872?
Vim versions 8.2.2434-3ubuntu3.1, 8.1.2269-1ubuntu5.4, 8.2.2434-1ubuntu1.2, 8.2.3487, 8.2.3565-1ubuntu2, 8.1.0875-5+deb10u6, 8.2.3565-1ubuntu2, 9.0.1378-2, 9.0.1894-1, and 9.0.2018-1 are affected.
How can I fix CVE-2021-3872?
To fix CVE-2021-3872, you should update your vim package to version 8.2.3487 or later.
Where can I find more information about CVE-2021-3872?
You can find more information about CVE-2021-3872 at the following links: [Mitre](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3872), [Github](https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b), [Huntr](https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8).