Vulnerability roundup 110: vim-8.2.3451: 9 advisories [7.8] #155353
Description
- CVE-2021-4136 CVSSv3=7.8 (nixos-21.11)
- CVE-2021-4173 CVSSv3=7.8 (nixos-21.11)
- CVE-2021-4187 CVSSv3=7.8 (nixos-21.11)
- CVE-2021-4192 CVSSv3=7.8 (nixos-21.11)
- CVE-2022-0128 CVSSv3=7.8 (nixos-21.11)
- CVE-2021-4166 CVSSv3=7.1 (nixos-21.11)
- CVE-2021-4193 CVSSv3=5.5 (nixos-21.11)
- CVE-2022-0156 CVSSv3=5.5 (nixos-21.11)
- CVE-2022-0158 CVSSv3=3.3 (nixos-21.11)
CVE details
CVE-2021-4136
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-4173
vim is vulnerable to Use After Free
CVE-2021-4187
vim is vulnerable to Use After Free
CVE-2021-4192
vim is vulnerable to Use After Free
CVE-2022-0128
vim is vulnerable to Out-of-bounds Read
CVE-2021-4166
vim is vulnerable to Out-of-bounds Read
CVE-2021-4193
vim is vulnerable to Out-of-bounds Read
CVE-2022-0156
vim is vulnerable to Use After Free
CVE-2022-0158
vim is vulnerable to Heap-based Buffer Overflow
Scanned versions: nixos-21.11: 3ddd960.