CVE-2021-3974: Use After Free in vim/vim
Published Nov 19, 2021
·Updated
Last updated 21 August 2024
Affected Software
6 affected componentsFixes available
vim Vim<8.2.3612
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=9.0
Debian Debian Linux=10.0
debian/vim<=2:8.2.2434-3+deb11u1, <=2:8.2.2434-3+deb11u3
2:9.0.1378-2+deb12u22:9.1.1230-1
Remediation
Event History
Nov 19, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Jan 12, 2024
Data Sourced
via Launchpad·12:00 AM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:34 AM
RemedyDescriptionSeverityAffected Software
Mar 27, 2025
Data Sourced
via Debian·04:24 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2021-3974?
CVE-2021-3974 is a vulnerability in vim that allows for Use After Free.
2
How severe is CVE-2021-3974?
CVE-2021-3974 is a vulnerability with a severity of high.
3
How does CVE-2021-3974 impact vim?
CVE-2021-3974 allows an attacker to exploit a Use After Free vulnerability in vim.
4
What versions of vim are affected by CVE-2021-3974?
vim versions 8.2.3612, 2:8.1.2269-1ubuntu5.6, 2:8.2.2434-3ubuntu3.2, 2:7.4.1689-3ubuntu1.5+, and 2:8.0.1453-1ubuntu1.8 are affected by CVE-2021-3974.
5
How can I fix CVE-2021-3974 in vim?
To fix CVE-2021-3974 in vim, update to version 8.2.3612 or apply the available patches.