Out-of-bounds Read Vulnerability in vim
Summary
CVE-2021-4193: vim is vulnerable to Out-of-bounds Read. Affects vim versions < 8.2.4173-r0. Fixed in 8.2.4173-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
vim is a popular text editor known for its extensive features and customization options. It is widely used by developers and system administrators for editing code and text files. However, the vim package in Alpine Linux versions 3.12 to 3.18 is vulnerable to an out-of-bounds read issue.
Vulnerability Detail
The out-of-bounds read vulnerability in vim allows an attacker to read data from memory locations outside the boundaries of an allocated buffer. This can lead to information disclosure or potential crashes. The vulnerability has a CVSS score of 5.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
8.2.4173-r0
This is the first release that contains the fix.
sudo apk add --upgrade vimTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the official fix by updating the vim package.
Conclusion
The out-of-bounds read vulnerability in vim can pose a risk to systems running Alpine Linux versions 3.12 to 3.18. It is crucial to update the vim package to the recommended version to mitigate the vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for vim →
FAQ
The vulnerability can potentially allow an attacker to read sensitive information from the affected system's memory or cause the application to crash.
Users of Alpine Linux versions 3.12 to 3.18 with the vim package installed are affected by this vulnerability.
At the time of this report, there are no known public exploits targeting this specific vulnerability.
Yes, the CVSS score for this vulnerability is 5.5, indicating a moderate severity level.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground and it will provide real-time alerts for open-source vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for vim.
