CVE-2021-3875: Heap-based Buffer Overflow in vim/vim
Published Oct 15, 2021
·Updated
vim is vulnerable to Heap-based Buffer Overflow
Affected Software
3 affected components
vim Vim<8.2.3489
Fedoraproject Fedora=33
Fedoraproject Fedora=35
Remediation
Event History
Oct 15, 2021
CVE Published
via MITRE·01:40 PM
Data Sourced
via MITRE·01:40 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 24, 58461
Event
08:08 AM
Frequently Asked Questions
1
What is the severity of CVE-2021-3875?
CVE-2021-3875 is classified as a high-severity vulnerability due to the potential for exploitation leading to arbitrary code execution.
2
How do I fix CVE-2021-3875?
To fix CVE-2021-3875, update Vim to version 8.2.3489 or later, or apply vendor-specific patches where available.
3
What types of systems are affected by CVE-2021-3875?
CVE-2021-3875 affects various versions of Vim, including versions prior to 8.2.3489 and Fedora 33 and 35 distributions.
4
What is the exploit method for CVE-2021-3875?
CVE-2021-3875 can be exploited through a heap-based buffer overflow, allowing an attacker to execute arbitrary code.
5
Are there any workarounds for CVE-2021-3875?
Currently, disabling certain functionalities in Vim or using alternative text editors may serve as temporary workarounds for CVE-2021-3875.