CVE-2021-4192 : vim is vulnerable to Use After Free

vim is vulnerable to Use After Free

Published 2021-12-31 15:15:09

Updated 2022-11-09 03:12:07

Source huntr.dev

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2021-4192

Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2020-001
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-001
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-002
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-003
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-004
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-005
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-006
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-007
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2021-008
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2022-001
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2022-002
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: 10.15.7 Update Security Update 2022-003
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*
Matching versions
Apple » Macos
Versions before (<) 12.3
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Matching versions
Apple » Macos
Versions from including (>=) 11.0 and before (<) 11.6.6
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Matching versions
Apple » Macos » Version: 10.15.7 Update Security Update 2022-004
cpe:2.3:o:apple:macos:10.15.7:security_update_2022-004:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 34
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Matching versions
VIM » VIM
Versions before (<) 8.2.3949
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-4192

EPSS FAQ

0.16%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 52 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-4192

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N	1.8	3.6	huntr.dev
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: None Availability: None
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-4192

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Assigned by:
- nvd@nist.gov (Secondary)
- security@huntr.dev (Primary)

References for CVE-2021-4192

http://seclists.org/fulldisclosure/2022/Jul/14

Full Disclosure: APPLE-SA-2022-07-20-4 Security Update 2022-005 Catalina
Mailing List;Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/202208-32

Vim, gVim: Multiple Vulnerabilities (GLSA 202208-32) — Gentoo security
Third Party Advisory

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2022/01/15/1

oss-security - Re: 3 new CVE's in vim
Mailing List;Third Party Advisory

CVEs referencing this url
https://huntr.dev/bounties/6dd9cb2e-a940-4093-856e-59b502429f22

Use After Free vulnerability found in vim
Exploit;Third Party Advisory
https://support.apple.com/kb/HT213183

About the security content of macOS Monterey 12.3 - Apple Support
Release Notes;Third Party Advisory

CVEs referencing this url
https://support.apple.com/kb/HT213343

About the security content of Security Update 2022-005 Catalina - Apple Support
Third Party Advisory

CVEs referencing this url
http://seclists.org/fulldisclosure/2022/Mar/29

Full Disclosure: APPLE-SA-2022-03-14-4 macOS Monterey 12.3
Mailing List;Third Party Advisory

CVEs referencing this url
https://support.apple.com/kb/HT213256

About the security content of macOS Big Sur 11.6.6 - Apple Support
Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/

[SECURITY] Fedora 34 Update: vim-8.2.4068-1.fc34 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html

[SECURITY] [DLA 3182-1] vim security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html

[SECURITY] [DLA 2947-1] vim security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://github.com/vim/vim/commit/4c13e5e6763c6eb36a343a2b8235ea227202e952

patch 8.2.3949: using freed memory with /\%V · vim/vim@4c13e5e · GitHub
Patch;Third Party Advisory
http://seclists.org/fulldisclosure/2022/May/35

Full Disclosure: APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6
Mailing List;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-4192

Products affected by CVE-2021-4192

Exploit prediction scoring system (EPSS) score for CVE-2021-4192

CVSS scores for CVE-2021-4192

CWE ids for CVE-2021-4192

References for CVE-2021-4192