DeutschShown in its original language — a full translation is planned for a future version.
vim: Schwachstelle ermöglicht Codeausführung
view advisory published 2021-12-19
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in vim ausnutzen,um einen Denial of Service zu verursachen, Sicherheitsmechanismen zu umgehen, den Speicher zu manipulieren oder potentiell Code auszuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-4136US | high7.8 | — | ||
vim is vulnerable to Heap-based Buffer Overflow | ||||
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS-2022-1743 vom 2022-01-27external
- Amazon Linux Security Advisory ALAS-2022-014 vom 2022-01-27external
- Amazon Linux Security Advisory ALAS-2022-1557 vom 2022-01-20external
- PoC auf huntr.devexternal
- SUSE Security Update SUSE-SU-2022:4619-1 vom 2022-12-27external
- SUSE Security Update SUSE-SU-2022:2102-1 vom 2022-06-16external
- NIST Vulnerability Database vom 2021-12-19external
- Gentoo Linux Security Advisory GLSA-202208-32 vom 2022-08-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan