CVE-2021-4019: Heap-based Buffer Overflow in vim/vim
Last updated 21 August 2024
Other sources
vim is vulnerable to Heap-based Buffer Overflow
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/vimto a version that resolves this vulnerability.Fixed in 2:8.2.2434-3+deb11u3Fixed in 2:9.0.1378-2+deb12u2Fixed in 2:9.1.1230-1 - Upgrade
Upgrade
alpine/vimto a version that resolves this vulnerability.Fixed in 8.2.3779-r0
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-4019.
What is the title of this vulnerability?
The title of this vulnerability is 'vim is vulnerable to Heap-based Buffer Overflow'.
What software is affected by this vulnerability?
The software affected by this vulnerability is vim.
What is the severity of this vulnerability?
The severity of this vulnerability depends on various factors such as the attacker's skill level and the system's configuration.
How do I fix this vulnerability?
To fix this vulnerability, update the vim software to version 2:8.0.1453-1ubuntu1.8 or higher if you are using Ubuntu, or version 2:8.1.0875-5+deb10u5 or higher if you are using Debian.