Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 830106 (CVE-2021-4173)

Summary: <app-editors/vim-8.2.4285: vulnerable to Use After Free (CVE-2021-4173)
Product: Gentoo Security Reporter: filip ambroz <filip.ambroz>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: CONFIRMED ---    
Severity: minor CC: vim
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://huntr.dev/bounties/a1b236b9-89fb-4ccf-9689-ba11b471e766/
Whiteboard: B3 [glsa]
Package list:
Runtime testing required: ---
Bug Depends on: 834460    
Bug Blocks:    

Description filip ambroz 2021-12-27 16:51:11 UTC
Use after free's / double free's can cause in memory corruption, that can cause a crash or other undefined (potentially exploitable) behaviour.

Reproducible: Always




CVE-2021-4173

vim is vulnerable to Use After Free 

URLs:
https://nvd.nist.gov/vuln/detail/CVE-2021-4173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4173

Fixed in patch 8.2.3902.
Comment 1 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2021-12-27 17:47:11 UTC
Thanks!
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-08-14 05:31:59 UTC
GLSA request filed