Moderate: vim security update
Summary
ALSA-2021:4517: Moderate: vim security update. Affects vim-X11 across 2 version ranges.
< 2:8.0.1763-16.el8_5.13
< 2:8.0.1763-16.el8
Fixed in 2:8.0.1763-16.el8_5.13 or 2:8.0.1763-16.el8, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Vim (Vi IMproved) is an updated and improved version of the vi editor. It provides enhanced features and functionality compared to the original vi editor.
Vulnerability Detail
This vulnerability (CVE-2021-3778) in Vim is a heap-based buffer overflow in the utf_ptr2char() function in mbyte.c. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update vim-X11-
< 2:8.0.1763-16.el82:8.0.1763-16.el8 -
< 2:8.0.1763-16.el8_5.132:8.0.1763-16.el8_5.13
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the security update as soon as possible.
Conclusion
In conclusion, this vulnerability in Vim could allow an attacker to execute arbitrary code or cause a denial of service. It is recommended to update the affected package to the latest version to mitigate the risk. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for vim-X11 →
FAQ
Vim is an updated and improved version of the vi editor, providing enhanced features and functionality.
This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service.
To fix this vulnerability, update the affected package to version 2:8.0.1763-16.el8_5.13 or later.
There is no known workaround for this vulnerability. It is recommended to apply the security update.
You can find more information about this vulnerability in the CVE page(s) listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for vim-X11.
