CVE-2021-4166

Description

vim is vulnerable to Out-of-bounds Read

CVSS breakdown

Affected products

• Apple / macOS12.3
• Apple / macOS10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Debian / debian_linux11.0 – 11.0
• Debian / debian_linux9.0 – 9.0
• Debian / debian_linux10.0 – 10.0
• fedoraproject / fedora35 – 35
• fedoraproject / fedora34 – 34
• openSUSE / Factory
• RedHat / enterprise_linux8.0 – 8.0
• SUSE / linux_enterprise15.0 – 15.0
• SUSE / linux_enterprise12.0 – 12.0
• vim / vim8.2.3884
• vim / vim/vimunspecified – 8.2

References

• MISChttps://huntr.dev/bounties/229df5dd-5507-44e9-832c-c70364bdf035
• PATCHhttps://github.com/vim/vim/commit/6f98371532fcff911b462d51bc64f2ce8a6ae682
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2022/01/15/1
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/
• VENDOR_ADVISORYhttps://support.apple.com/kb/HT213183
• MAILING_LISThttp://seclists.org/fulldisclosure/2022/Mar/29
• VENDOR_ADVISORYhttps://support.apple.com/kb/HT213256
• MAILING_LISThttp://seclists.org/fulldisclosure/2022/May/35
• VENDOR_ADVISORYhttps://support.apple.com/kb/HT213343
• MAILING_LISThttp://seclists.org/fulldisclosure/2022/Jul/14
• MISChttps://security.gentoo.org/glsa/202208-32