Red Hat Security Advisory

RHSA-2022:0366

vim security update

Released 2022-02-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) vim-X11-2:8.0.1763-16.el8_5.4, vim-common-2:8.0.1763-16.el8_5.4, vim-enhanced-2:8.0.1763-16.el8_5.4 +1
Red Hat Enterprise Linux BaseOS (v. 8) vim-2:8.0.1763-16.el8_5.4, vim-minimal-2:8.0.1763-16.el8_5.4

TI-2021-03059 CVE-2021-4192 · GHSA-pg7r-g97x-9qxx

LOW 38

vim is vulnerable to Use After Free

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01848 Published 2021-12-31 Partial fix · 8.2 CWE-416

TI-2021-02910 CVE-2021-4019 · GHSA-r79c-6hf5-2jjx

LOW 38

vim is vulnerable to Heap-based Buffer Overflow

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01927 Published 2021-12-01 Partial fix · 8.2.3669 CWE-122

TI-2021-02881 CVE-2021-3984 · GHSA-4jr3-2x33-xqgg

LOW 37

vim is vulnerable to Heap-based Buffer Overflow

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01571 Published 2021-12-01 Partial fix · 8.2.3625 CWE-122

TI-2021-02798 CVE-2021-3872 · GHSA-4j64-qfqf-jjgr

LOW 37

vim is vulnerable to Heap-based Buffer Overflow

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01494 Published 2021-10-19 Partial fix · 8.2.3487 CWE-122

TI-2021-03060 CVE-2021-4193 · GHSA-wfxq-p22p-779j

LOW 29

vim is vulnerable to Out-of-bounds Read

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01886 Published 2021-12-31 Partial fix · 8.2.3901 CWE-125