{"id":"CVE-2021-3984","aliases":["ALPINE-CVE-2021-3984","ALSA-2022:0366","AZL-6948","BELL-CVE-2021-3984","CLSA-2021-1639578578","CLSA-2021-1639580651","CLSA-2021-1639681874","CLSA-2021-1639686040","CLSA-2021-1640621325","CLSA-2026-1777944852","CLSA-2026-1777945409","DEBIAN-CVE-2021-3984","DLA-2947-1","DLA-3182-1","EUVD-2021-27184","GHSA-4jr3-2x33-xqgg","OESA-2021-1457","RHSA-2022:0366","RLSA-2022:0366","SUSE-SU-2022:0736-1","SUSE-SU-2022:0736-2","SUSE-SU-2022:2102-1","SUSE-SU-2022:4619-1","UBUNTU-CVE-2021-3984","USN-5247-1","USN-5433-1","USN-6965-1","openSUSE-SU-2022:0736-1"],"status":"published","title":"Heap-based Buffer Overflow in vim/vim","description":"vim is vulnerable to Heap-based Buffer Overflow","severity":{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01571,"percentile":0.75583,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2021-12-01T00:00:00Z","modified":"2026-11-03T06:32:47Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"vim","fixed_in":["8.2.3650-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"vim","fixed_in":["8.2.4081-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"vim","fixed_in":["2:8.2.3995-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"vim","fixed_in":["2:8.2.3995-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"vim","fixed_in":["2:8.2.3995-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"vim","fixed_in":["8.2-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"vim","fixed_in":["8.2-8.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","fixed_in":["2:7.4.052-1ubuntu3.1+esm17"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","fixed_in":["2:7.4.1689-3ubuntu1.5+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"vim","fixed_in":["2:8.0.1453-1ubuntu1.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"vim","fixed_in":["2:8.1.2269-1ubuntu5.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.3650-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.13"}]}],"bundled":5},{"source":"osv","ecosystem":"Azure Linux:2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.4081-1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-athena-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gnome-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gtk3-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-gui-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-nox-py2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"vim-tiny","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.1689-3ubuntu1.5+tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:7.4.629-5.2.el6.tuxcare.els4"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.3995-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.0197-4+deb9u5"}]}],"versions":["2:8.0.0197-4","2:8.0.0197-4+deb9u1","2:8.0.0197-4+deb9u2","2:8.0.0197-4+deb9u3","2:8.0.0197-4+deb9u4"],"bundled":20},{"source":"osv","ecosystem":"Debian:10","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.0875-5+deb10u3"}]}],"versions":["2:8.1.0875-5","2:8.1.0875-5+deb10u1","2:8.1.0875-5+deb10u2"],"bundled":41},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2-8.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-X11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-enhanced-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"vim-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-16.el8_5.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.5038-150000.5.21.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0814-17.9.1"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0814-17.9.1"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0814-17.9.1"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0814-17.9.1"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0814-17.9.1"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0814-17.9.1"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0814-17.9.1"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0814-17.9.1"}]}],"bundled":104},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm17"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7","2:7.4.052-1ubuntu3.1+esm8","2:7.4.052-1ubuntu3.1+esm9","2:7.4.052-1ubuntu3.1+esm10","2:7.4.052-1ubuntu3.1+esm11","2:7.4.052-1ubuntu3.1+esm12","2:7.4.052-1ubuntu3.1+esm13","2:7.4.052-1ubuntu3.1+esm14","2:7.4.052-1ubuntu3.1+esm15","2:7.4.052-1ubuntu3.1+esm16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm4"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.8"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.6"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1453-1ubuntu1.8"}]}],"versions":["2:8.0.0197-4ubuntu5","2:8.0.1144-1ubuntu1","2:8.0.1401-1ubuntu1","2:8.0.1401-1ubuntu2","2:8.0.1401-1ubuntu3","2:8.0.1453-1ubuntu1","2:8.0.1453-1ubuntu1.1","2:8.0.1453-1ubuntu1.3","2:8.0.1453-1ubuntu1.4","2:8.0.1453-1ubuntu1.6","2:8.0.1453-1ubuntu1.7"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.1.2269-1ubuntu5.6"}]}],"versions":["2:8.1.0875-5ubuntu2","2:8.1.0875-5ubuntu3","2:8.1.0875-5ubuntu4","2:8.1.2269-1ubuntu1","2:8.1.2269-1ubuntu4","2:8.1.2269-1ubuntu5","2:8.1.2269-1ubuntu5.3","2:8.1.2269-1ubuntu5.4"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.1689-3ubuntu1.5+esm4"}]}],"versions":["2:7.4.712-2ubuntu4","2:7.4.826-1ubuntu1","2:7.4.826-1ubuntu2","2:7.4.826-1ubuntu3","2:7.4.963-1ubuntu1","2:7.4.963-1ubuntu4","2:7.4.963-1ubuntu5","2:7.4.1689-3ubuntu1","2:7.4.1689-3ubuntu1.1","2:7.4.1689-3ubuntu1.2","2:7.4.1689-3ubuntu1.3","2:7.4.1689-3ubuntu1.4","2:7.4.1689-3ubuntu1.5","2:7.4.1689-3ubuntu1.5+esm2","2:7.4.1689-3ubuntu1.5+esm3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.052-1ubuntu3.1+esm17"}]}],"versions":["2:7.4.000-1ubuntu2","2:7.4.052-1ubuntu1","2:7.4.052-1ubuntu2","2:7.4.052-1ubuntu3","2:7.4.052-1ubuntu3.1","2:7.4.052-1ubuntu3.1+esm1","2:7.4.052-1ubuntu3.1+esm3","2:7.4.052-1ubuntu3.1+esm4","2:7.4.052-1ubuntu3.1+esm5","2:7.4.052-1ubuntu3.1+esm6","2:7.4.052-1ubuntu3.1+esm7","2:7.4.052-1ubuntu3.1+esm8","2:7.4.052-1ubuntu3.1+esm9","2:7.4.052-1ubuntu3.1+esm10","2:7.4.052-1ubuntu3.1+esm11","2:7.4.052-1ubuntu3.1+esm12","2:7.4.052-1ubuntu3.1+esm13","2:7.4.052-1ubuntu3.1+esm14","2:7.4.052-1ubuntu3.1+esm15","2:7.4.052-1ubuntu3.1+esm16"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1568-5.17.1"}]}],"bundled":14}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"vim","product":"vim"},{"vendor":"vim","product":"vim/vim"}],"references":[{"url":"https://huntr.dev/bounties/b114b5a2-18e2-49f0-b350-15994d71426a","tags":["x_transferred","Exploit","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/vim/vim/commit/2de9b7c7c8791da8853a9a7ca9c467867465b655","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/01/15/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html","tags":["mailing-list","x_transferred","Mitigation","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202208-32","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3984","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/"},{"url":"https://github.com/advisories/GHSA-4jr3-2x33-xqgg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3984","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-0366.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-3872","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3984","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-4019","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-4192","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-4193","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3984","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2021-1639578578.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1639580651","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1639681874","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1639686040","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2021-1640621325.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777944852.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777945409.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3984","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1457","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0366","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039687","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0366.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3872","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3872","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3872","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3984","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3984","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4019","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4019","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4019","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4192","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4192","tags":["advisory"]},{"url":"https://huntr.dev/bounties/6dd9cb2e-a940-4093-856e-59b502429f22/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4193","tags":["advisory"]},{"url":"https://huntr.dev/bounties/92c1940d-8154-473f-84ce-0de43b0c2eb0/","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0366","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220736-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190533","tags":["report"]},{"url":"https://bugzilla.suse.com/1190570","tags":["report"]},{"url":"https://bugzilla.suse.com/1191893","tags":["report"]},{"url":"https://bugzilla.suse.com/1192478","tags":["report"]},{"url":"https://bugzilla.suse.com/1192481","tags":["report"]},{"url":"https://bugzilla.suse.com/1193294","tags":["report"]},{"url":"https://bugzilla.suse.com/1193298","tags":["report"]},{"url":"https://bugzilla.suse.com/1194216","tags":["report"]},{"url":"https://bugzilla.suse.com/1194556","tags":["report"]},{"url":"https://bugzilla.suse.com/1195004","tags":["report"]},{"url":"https://bugzilla.suse.com/1195066","tags":["report"]},{"url":"https://bugzilla.suse.com/1195126","tags":["report"]},{"url":"https://bugzilla.suse.com/1195202","tags":["report"]},{"url":"https://bugzilla.suse.com/1195356","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0413","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220736-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222102-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1070955","tags":["report"]},{"url":"https://bugzilla.suse.com/1191770","tags":["report"]},{"url":"https://bugzilla.suse.com/1192167","tags":["report"]},{"url":"https://bugzilla.suse.com/1192902","tags":["report"]},{"url":"https://bugzilla.suse.com/1192903","tags":["report"]},{"url":"https://bugzilla.suse.com/1192904","tags":["report"]},{"url":"https://bugzilla.suse.com/1193466","tags":["report"]},{"url":"https://bugzilla.suse.com/1193905","tags":["report"]},{"url":"https://bugzilla.suse.com/1194093","tags":["report"]},{"url":"https://bugzilla.suse.com/1194217","tags":["report"]},{"url":"https://bugzilla.suse.com/1194388","tags":["report"]},{"url":"https://bugzilla.suse.com/1194872","tags":["report"]},{"url":"https://bugzilla.suse.com/1194885","tags":["report"]},{"url":"https://bugzilla.suse.com/1195203","tags":["report"]},{"url":"https://bugzilla.suse.com/1195332","tags":["report"]},{"url":"https://bugzilla.suse.com/1195354","tags":["report"]},{"url":"https://bugzilla.suse.com/1196361","tags":["report"]},{"url":"https://bugzilla.suse.com/1198596","tags":["report"]},{"url":"https://bugzilla.suse.com/1198748","tags":["report"]},{"url":"https://bugzilla.suse.com/1199331","tags":["report"]},{"url":"https://bugzilla.suse.com/1199333","tags":["report"]},{"url":"https://bugzilla.suse.com/1199334","tags":["report"]},{"url":"https://bugzilla.suse.com/1199651","tags":["report"]},{"url":"https://bugzilla.suse.com/1199655","tags":["report"]},{"url":"https://bugzilla.suse.com/1199693","tags":["report"]},{"url":"https://bugzilla.suse.com/1199745","tags":["report"]},{"url":"https://bugzilla.suse.com/1199747","tags":["report"]},{"url":"https://bugzilla.suse.com/1199936","tags":["report"]},{"url":"https://bugzilla.suse.com/1200010","tags":["report"]},{"url":"https://bugzilla.suse.com/1200011","tags":["report"]},{"url":"https://bugzilla.suse.com/1200012","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1927","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224619-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173256","tags":["report"]},{"url":"https://bugzilla.suse.com/1174564","tags":["report"]},{"url":"https://bugzilla.suse.com/1176549","tags":["report"]},{"url":"https://bugzilla.suse.com/1182324","tags":["report"]},{"url":"https://bugzilla.suse.com/1200270","tags":["report"]},{"url":"https://bugzilla.suse.com/1200697","tags":["report"]},{"url":"https://bugzilla.suse.com/1200698","tags":["report"]},{"url":"https://bugzilla.suse.com/1200700","tags":["report"]},{"url":"https://bugzilla.suse.com/1200701","tags":["report"]},{"url":"https://bugzilla.suse.com/1200732","tags":["report"]},{"url":"https://bugzilla.suse.com/1200884","tags":["report"]},{"url":"https://bugzilla.suse.com/1200902","tags":["report"]},{"url":"https://bugzilla.suse.com/1200903","tags":["report"]},{"url":"https://bugzilla.suse.com/1200904","tags":["report"]},{"url":"https://bugzilla.suse.com/1201132","tags":["report"]},{"url":"https://bugzilla.suse.com/1201133","tags":["report"]},{"url":"https://bugzilla.suse.com/1201134","tags":["report"]},{"url":"https://bugzilla.suse.com/1201135","tags":["report"]},{"url":"https://bugzilla.suse.com/1201136","tags":["report"]},{"url":"https://bugzilla.suse.com/1201150","tags":["report"]},{"url":"https://bugzilla.suse.com/1201151","tags":["report"]},{"url":"https://bugzilla.suse.com/1201152","tags":["report"]},{"url":"https://bugzilla.suse.com/1201153","tags":["report"]},{"url":"https://bugzilla.suse.com/1201154","tags":["report"]},{"url":"https://bugzilla.suse.com/1201155","tags":["report"]},{"url":"https://bugzilla.suse.com/1201249","tags":["report"]},{"url":"https://bugzilla.suse.com/1201356","tags":["report"]},{"url":"https://bugzilla.suse.com/1201359","tags":["report"]},{"url":"https://bugzilla.suse.com/1201363","tags":["report"]},{"url":"https://bugzilla.suse.com/1201620","tags":["report"]},{"url":"https://bugzilla.suse.com/1201863","tags":["report"]},{"url":"https://bugzilla.suse.com/1202046","tags":["report"]},{"url":"https://bugzilla.suse.com/1202049","tags":["report"]},{"url":"https://bugzilla.suse.com/1202050","tags":["report"]},{"url":"https://bugzilla.suse.com/1202051","tags":["report"]},{"url":"https://bugzilla.suse.com/1202414","tags":["report"]},{"url":"https://bugzilla.suse.com/1202420","tags":["report"]},{"url":"https://bugzilla.suse.com/1202421","tags":["report"]},{"url":"https://bugzilla.suse.com/1202511","tags":["report"]},{"url":"https://bugzilla.suse.com/1202512","tags":["report"]},{"url":"https://bugzilla.suse.com/1202515","tags":["report"]},{"url":"https://bugzilla.suse.com/1202552","tags":["report"]},{"url":"https://bugzilla.suse.com/1202599","tags":["report"]},{"url":"https://bugzilla.suse.com/1202687","tags":["report"]},{"url":"https://bugzilla.suse.com/1202689","tags":["report"]},{"url":"https://bugzilla.suse.com/1202862","tags":["report"]},{"url":"https://bugzilla.suse.com/1202962","tags":["report"]},{"url":"https://bugzilla.suse.com/1203110","tags":["report"]},{"url":"https://bugzilla.suse.com/1203152","tags":["report"]},{"url":"https://bugzilla.suse.com/1203155","tags":["report"]},{"url":"https://bugzilla.suse.com/1203194","tags":["report"]},{"url":"https://bugzilla.suse.com/1203272","tags":["report"]},{"url":"https://bugzilla.suse.com/1203508","tags":["report"]},{"url":"https://bugzilla.suse.com/1203509","tags":["report"]},{"url":"https://bugzilla.suse.com/1203796","tags":["report"]},{"url":"https://bugzilla.suse.com/1203797","tags":["report"]},{"url":"https://bugzilla.suse.com/1203799","tags":["report"]},{"url":"https://bugzilla.suse.com/1203820","tags":["report"]},{"url":"https://bugzilla.suse.com/1203924","tags":["report"]},{"url":"https://bugzilla.suse.com/1204779","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3705","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-3984","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5247-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5433-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6965-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1154","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FDNZ3N5S7UGKPUUKPGOQQGPJJK3YTW37/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3984","title":"Heap-based Buffer Overflow in vim/vim","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-01T00:00:00Z","modified":"2024-08-03T17:09:09.762Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-27184","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-01T00:00:00Z","modified":"2024-08-03T17:09:09Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:25:11.376657Z"}],"ghsa":[{"id":"GHSA-4jr3-2x33-xqgg","title":"vim is vulnerable to Heap-based Buffer Overflow","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-02T00:00:51Z","modified":"2023-01-29T05:03:47Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:45:23.726919Z"}],"nvd":[{"id":"CVE-2021-3984","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-01T11:15:07.797Z","modified":"2026-06-17T04:06:20.43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:07:01.811115Z"}],"osv":[{"id":"ALPINE-CVE-2021-3984","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-01T11:15:07.797Z","modified":"2026-11-03T06:32:47.878318218Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"AZL-6948","title":"CVE-2021-3984 affecting package vim for versions less than 8.2.4081-1","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-01T11:15:07Z","modified":"2026-04-21T04:38:36.881227Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"BELL-CVE-2021-3984","title":"CVE-2021-3984 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:39.229724Z","modified":"2026-01-26T09:48:03.057196Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3984","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-01T11:15:07.797Z","modified":"2026-10-21T08:12:49.699724489Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:20.843843Z"},{"id":"DEBIAN-CVE-2021-3984","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-01T11:15:07.797Z","modified":"2026-10-23T18:03:32.365212464Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2021-1457","title":"vim security update","description":"Vim is a highly configurable text editor for efficiently creating and changing any kind of text.\r\n\r\nSecurity Fix(es):\r\n\r\nvim is vulnerable to Heap-based Buffer Overflow(CVE-2021-3984)","status":"published","published":"2021-12-10T11:04:44Z","modified":"2026-08-18T01:16:10.640407328Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2022:0366","title":"Red Hat Security Advisory: vim security update","status":"published","published":"2024-09-16T06:42:13Z","modified":"2026-07-03T10:01:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2022:0366","title":"Moderate: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: heap-based buffer overflow in win_redr_status() in drawscreen.c (CVE-2021-3872)\n\n* vim: illegal memory access in find_start_brace() in cindent.c when C-indenting (CVE-2021-3984)\n\n* vim: heap-based buffer overflow in find_help_tags() in help.c (CVE-2021-4019)\n\n* vim: use-after-free in win_linetabsize() (CVE-2021-4192)\n\n* vim: out-of-bound read in getvcol() (CVE-2021-4193)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-02-01T20:12:46Z","modified":"2026-02-05T01:15:07.724301Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3984","description":"vim is vulnerable to Heap-based Buffer Overflow","status":"published","published":"2021-12-01T11:15:00Z","modified":"2026-02-04T03:21:52.890135Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"ALSA-2022:0366","title":"Moderate: vim security update","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: heap-based buffer overflow in win_redr_status() in drawscreen.c (CVE-2021-3872)\n\n* vim: illegal memory access in find_start_brace() in cindent.c when C-indenting (CVE-2021-3984)\n\n* vim: heap-based buffer overflow in find_help_tags() in help.c (CVE-2021-4019)\n\n* vim: use-after-free in win_linetabsize() (CVE-2021-4192)\n\n* vim: out-of-bound read in getvcol() (CVE-2021-4193)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-02-01T20:12:46Z","modified":"2026-10-29T11:00:36.794064347Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2021-1639578578","title":"Fixed CVEs in vim: CVE-2021-3974, CVE-2021-4019, CVE-2021-3973, CVE-2021-4069, CVE-2021-3984","description":"- CVE-2021-3974: fix using freed memory with regexp using a mark\n- CVE-2021-3984: fix illegal memory access when C-indenting\n- CVE-2021-3973: fix crash when using CTRL-W f without finding a file name\n- CVE-2021-4019: fix buffer overflow with long help argument\n- CVE-2021-4069: fix using freed memory in open command","status":"published","published":"2021-12-15T14:29:38Z","modified":"2026-10-21T10:48:10.800265519Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2021-1639580651","title":"Fix CVE(s): CVE-2021-3984, CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069","description":"\n   * SECURITY UPDATE: Using freed memory with regexp using a mark\n     - debian/patches/CVE-2021-3974.patch: Get the line again after\n       getting the mark position\n     - CVE-2021-3974\n   * SECURITY UPDATE: Illegal memory access when C-indenting\n     - debian/patches/CVE-2021-3984.patch: Also set the cursor column\n     - CVE-2021-3984\n   * SECURITY UPDATE: Crash when using CTRL-W f without finding a file name\n     - debian/patches/CVE-2021-3973.patch: Bail out when the file name length\n       is zero\n     - CVE-2021-3973\n   * SECURITY UPDATE: Buffer overflow with long help argument\n     - debian/patches/CVE-2021-4019.patch: Use snprintf\n     - CVE-2021-4019\n   * SECURITY UPDATE: Using freed memory in open command\n     - debian/patches/CVE-2021-4069.patch: Make a copy of the current line\n     - CVE-2021-4069","status":"published","published":"2021-12-15T15:04:11Z","modified":"2026-06-04T10:03:54.679697797Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2021-1639681874","title":"Fix CVE(s): CVE-2021-3984, CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069","description":"\n   * SECURITY UPDATE: Using freed memory with regexp using a mark\n     - debian/patches/CVE-2021-3974.patch: Get the line again after\n       getting the mark position\n     - CVE-2021-3974\n   * SECURITY UPDATE: Illegal memory access when C-indenting\n     - debian/patches/CVE-2021-3984.patch: Also set the cursor column\n     - CVE-2021-3984\n   * SECURITY UPDATE: Crash when using CTRL-W f without finding a file name\n     - debian/patches/CVE-2021-3973.patch: Bail out when the file name length\n       is zero\n     - CVE-2021-3973\n   * SECURITY UPDATE: Buffer overflow with long help argument\n     - debian/patches/CVE-2021-4019.patch: Use snprintf\n     - CVE-2021-4019\n   * SECURITY UPDATE: Using freed memory in open command\n     - debian/patches/CVE-2021-4069.patch: Make a copy of the current line\n     - CVE-2021-4069","status":"published","published":"2021-12-16T19:11:14Z","modified":"2026-06-04T10:04:29.622679676Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2021-1639686040","title":"Fix CVE(s): CVE-2021-3984, CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069","description":"\n   * SECURITY UPDATE: Using freed memory with regexp using a mark\n     - debian/patches/CVE-2021-3974.patch: Get the line again after\n       getting the mark position\n     - CVE-2021-3974\n   * SECURITY UPDATE: Illegal memory access when C-indenting\n     - debian/patches/CVE-2021-3984.patch: Also set the cursor column\n     - CVE-2021-3984\n   * SECURITY UPDATE: Crash when using CTRL-W f without finding a file name\n     - debian/patches/CVE-2021-3973.patch: Bail out when the file name length\n       is zero\n     - CVE-2021-3973\n   * SECURITY UPDATE: Buffer overflow with long help argument\n     - debian/patches/CVE-2021-4019.patch: Use snprintf\n     - CVE-2021-4019\n   * SECURITY UPDATE: Using freed memory in open command\n     - debian/patches/CVE-2021-4069.patch: Make a copy of the current line\n     - CVE-2021-4069","status":"published","published":"2021-12-16T20:20:40Z","modified":"2026-06-04T10:04:19.537828623Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2021-1640621325","title":"Fix of CVE: CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069, CVE-2021-3984","description":"- CVE-2021-3974: fix using freed memory with regexp using a mark\n- CVE-2021-3984: fix illegal memory access when C-indenting\n- CVE-2021-3973: fix crash when using CTRL-W f without finding a file name\n- CVE-2021-4019: fix buffer overflow with long help argument\n- CVE-2021-4069: fix using freed memory in open command","status":"published","published":"2021-12-27T16:08:45Z","modified":"2026-10-21T10:47:41.663999869Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2026-1777944852","title":"vim: Fix of 2 CVEs","description":"- CVE-2021-3984: in find_start_brace() (misc1.c), when a found '{' lies\n  inside a comment, restore the full cursor position (line and column)\n  instead of only the line so subsequent C-indent lookups stay within\n  the line bounds.\n- CVE-2022-2571: in ins_compl_get_exp() (edit.c), when CONT_ADDING is\n  active, only advance tmp_ptr by compl_length if compl_length does not\n  exceed the remaining line length, so insert-mode completion no longer\n  reads past the end of the line.","status":"published","published":"2026-05-05T01:34:18Z","modified":"2026-06-01T00:33:27.323201571Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1777945409","title":"vim: Fix of 2 CVEs","description":"- CVE-2021-3984: in find_start_brace() (misc1.c), when a found '{' lies\n  inside a comment, restore the full cursor position (line and column)\n  instead of only the line so subsequent C-indent lookups stay within\n  the line bounds.\n- CVE-2022-2571: in ins_compl_get_exp() (edit.c), when CONT_ADDING is\n  active, only advance tmp_ptr by compl_length if compl_length does not\n  exceed the remaining line length, so insert-mode completion no longer\n  reads past the end of the line.","status":"published","published":"2026-05-05T23:31:50Z","modified":"2026-06-01T00:33:18.778144217Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-2947-1","title":"vim - security update","status":"published","published":"2022-03-11T00:00:00Z","modified":"2026-03-09T01:21:11.068502Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3182-1","title":"vim - security update","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-03-09T01:23:17.897521Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2022:0736-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).\n- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).\n- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).\n- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).\n- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).\n- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).\n- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).\n- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).\n- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).\n- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).\n- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).\n- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).\n- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).\n- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).\n","status":"published","published":"2022-03-04T13:52:29Z","modified":"2026-02-04T03:55:17.792803Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"SUSE-SU-2022:0736-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).\n- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).\n- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).\n- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).\n- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).\n- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).\n- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).\n- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).\n- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).\n- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).\n- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).\n- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).\n- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).\n- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).\n","status":"published","published":"2022-03-04T13:54:09Z","modified":"2026-02-04T03:57:28.515671Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0736-2","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).\n- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).\n- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).\n- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).\n- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).\n- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).\n- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).\n- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).\n- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).\n- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).\n- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).\n- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).\n- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).\n- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).\n","status":"published","published":"2022-04-19T19:11:54Z","modified":"2026-02-04T03:08:40.953293Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:2102-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\n- CVE-2017-17087: Fixed information leak via .swp files (bsc#1070955).\n- CVE-2021-3875: Fixed heap-based buffer overflow (bsc#1191770).\n- CVE-2021-3903: Fixed heap-based buffer overflow (bsc#1192167).\n- CVE-2021-3968: Fixed heap-based buffer overflow (bsc#1192902).\n- CVE-2021-3973: Fixed heap-based buffer overflow (bsc#1192903).\n- CVE-2021-3974: Fixed use-after-free (bsc#1192904).\n- CVE-2021-4069: Fixed use-after-free in ex_open()in src/ex_docmd.c (bsc#1193466).\n- CVE-2021-4136: Fixed heap-based buffer overflow (bsc#1193905).\n- CVE-2021-4166: Fixed out-of-bounds read (bsc#1194093).\n- CVE-2021-4192: Fixed use-after-free (bsc#1194217).\n- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).\n- CVE-2022-0128: Fixed out-of-bounds read (bsc#1194388).\n- CVE-2022-0213: Fixed heap-based buffer overflow (bsc#1194885).\n- CVE-2022-0261: Fixed heap-based buffer overflow (bsc#1194872).\n- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).\n- CVE-2022-0359: Fixed heap-based buffer overflow in init_ccline() in ex_getln.c (bsc#1195203).\n- CVE-2022-0392: Fixed heap-based buffer overflow (bsc#1195332).\n- CVE-2022-0407: Fixed heap-based buffer overflow (bsc#1195354).\n- CVE-2022-0696: Fixed NULL pointer dereference (bsc#1196361).\n- CVE-2022-1381: Fixed global heap buffer overflow in skip_range (bsc#1198596).\n- CVE-2022-1420: Fixed out-of-range pointer offset (bsc#1198748).\n- CVE-2022-1616: Fixed use-after-free in append_command (bsc#1199331).\n- CVE-2022-1619: Fixed heap-based Buffer Overflow in function cmdline_erase_chars (bsc#1199333).\n- CVE-2022-1620: Fixed NULL pointer dereference in function vim_regexec_string (bsc#1199334).\n- CVE-2022-1733: Fixed heap-based buffer overflow in cindent.c (bsc#1199655).\n- CVE-2022-1735: Fixed heap-based buffer overflow (bsc#1199651).\n- CVE-2022-1771: Fixed stack exhaustion (bsc#1199693).\n- CVE-2022-1785: Fixed out-of-bounds write (bsc#1199745).\n- CVE-2022-1796: Fixed use-after-free in find_pattern_in_path (bsc#1199747).\n- CVE-2022-1851: Fixed out-of-bounds read (bsc#1199936).\n- CVE-2022-1897: Fixed out-of-bounds write (bsc#1200010).\n- CVE-2022-1898: Fixed use-after-free (bsc#1200011).\n- CVE-2022-1927: Fixed buffer over-read (bsc#1200012).\n","status":"published","published":"2022-06-16T13:18:54Z","modified":"2026-02-04T03:03:47.66362Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:4619-1","title":"Security update for vim","description":"This update for vim fixes the following issues:\n\nUpdated to version 9.0.0814:\n\n  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow\n  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.\n  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.\n  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.\n  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c\n  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()\n  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c\n  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c\n  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c\n  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()\n  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.\n  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c\n  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free\n  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()\n  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321\n  * Fixing bsc#1200884 Vim: Error on startup\n  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32\n  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37\n  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37\n  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()\n  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044\n  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045\n  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.\n  * Fixing bsc#1201620 vim: SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue\n  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()\n  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()\n  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char\n  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()\n  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()\n  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()\n  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()\n  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()\n  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()\n  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()\n  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow\n  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()\n  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()\n  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()\n  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()\n  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()\n  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()\n  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()\n  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()\n  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand\n  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()\n  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()\n  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()\n  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()\n  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()\n  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()\n  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()\n  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()\n  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()\n  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c\n  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240\n  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval\n  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00\n  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow \n  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow \n  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to \n    Heap-based Buffer Overflow \n  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to \n    Heap-based Buffer Overflow \n  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use\n    After Free \n  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()\n    in src/ex_docmd.c \n  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to\n    Heap-based Buffer Overflow \n  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to\n    Out-of-bounds Read \n  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to \n    Out-of-bounds Read \n  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free\n  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow\n    in vim prior to 8.2. \n  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to\n    Heap-based Buffer Overflow \n  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in\n    vim prior to 8.2. \n  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in\n    init_ccline() in ex_getln.c \n  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in\n    Conda vim prior to 8.2. \n  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow\n    in skip_range \n  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in\n    append_command \n  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in\n    function cmdline_erase_chars \n  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in\n    function vim_regexec_string \n  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in\n    find_pattern_in_path \n  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim \n  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior\n    to 8.2 \n  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior\n    to 8.2 \n  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a\n    .swp file to the editor's primary group, which allows local users to obtain\n    sensitive information \n  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to\n    Out-of-bounds Read \n  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow\n    in vim prior to 8.2 \n  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in\n    vim prior to 8.2 \n  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset \n  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow \n  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in\n    cindent.c \n  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior\n    to 8.2. \n  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write \n  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read \n  * Fixing bsc#1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in vim prior to 8.2.\n  * Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in normal.c\n  * Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in win_redr_status() drawscreen.c\n  * Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to Heap-based Buffer Overflow\n  * Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow\n  * Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to Heap-based Buffer Overflow\n  * Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow\n  * Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c\n  *  Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read\n  * Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability \n    exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which causes a denial of service. \n  * Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim prior to 8.2.\n  * Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()\n  * Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim prior to 8.2.\n  * Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c\n","status":"published","published":"2022-12-27T04:16:45Z","modified":"2026-02-04T02:52:31.24731Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5247-1","title":"vim vulnerabilities","description":"It was discovered that vim incorrectly handled parsing of filenames in its\nsearch functionality. If a user was tricked into opening a specially crafted\nfile, an attacker could crash the application, leading to a denial of\nservice. This issue only affected Ubuntu 21.10. (CVE-2021-3973)\n\nIt was discovered that vim incorrectly handled memory when opening and\nsearching the contents of certain files. If a user was tricked into opening\na specially crafted file, an attacker could crash the application, leading to\na denial of service, or possibly achieve code execution with user privileges.\nThis issue only affected Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2021-3974)\n\nIt was discovered that vim incorrectly handled memory when opening and editing\ncertain files. If a user was tricked into opening a specially crafted file, an\nattacker could crash the application, leading to a denial of service, or\npossibly achieve code execution with user privileges. (CVE-2021-3984)\n\nIt was discovered that vim incorrectly handled memory when opening and editing\ncertain files. If a user was tricked into opening a specially crafted file, an\nattacker could crash the application, leading to a denial of service, or\npossibly achieve code execution with user privileges. (CVE-2021-4019)\n\nIt was discovered that vim incorrectly handled memory when opening and editing\ncertain files. If a user was tricked into opening a specially crafted file, an\nattacker could crash the application, leading to a denial of service, or\npossibly achieve code execution with user privileges.(CVE-2021-4069)\n","status":"published","published":"2022-01-27T06:37:23Z","modified":"2026-02-10T04:42:25Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5433-1","title":"vim vulnerabilities","description":"It was discovered that Vim incorrectly handled parsing of filenames in its\nsearch functionality. If a user were tricked into opening a specially crafted\nfile, an attacker could crash the application, leading to a denial of\nservice. (CVE-2021-3973)\n\nIt was discovered that Vim incorrectly handled memory when opening and\nsearching the contents of certain files. If a user were tricked into opening\na specially crafted file, an attacker could crash the application, leading to\na denial of service, or possibly achieve code execution with user privileges.\n(CVE-2021-3974)\n\nIt was discovered that Vim incorrectly handled memory when opening and editing\ncertain files. If a user were tricked into opening a specially crafted file,\nan attacker could crash the application, leading to a denial of service, or\npossibly achieve code execution with user privileges. (CVE-2021-3984,\nCVE-2021-4019, CVE-2021-4069)\n\nIt was discovered that Vim was using freed memory when dealing with regular\nexpressions inside a visual selection. If a user were tricked into opening a\nspecially crafted file, an attacker could crash the application, leading to a\ndenial of service, or possibly achieve code execution with user privileges.\n(CVE-2021-4192)\n\nIt was discovered that Vim was incorrectly performing read and write\noperations when in visual block mode, going beyond the end of a line and\ncausing a heap buffer overflow. If a user were tricked into opening a\nspecially crafted file, an attacker could crash the application, leading to a\ndenial of service, or possibly achieve code execution with user privileges.\n(CVE-2022-0261, CVE-2022-0318)\n\nIt was discovered that Vim was using freed memory when dealing with regular\nexpressions through its old regular expression engine. If a user were tricked\ninto opening a specially crafted file, an attacker could crash the application,\nleading to a denial of service, or possibly achieve code execution with user\nprivileges. (CVE-2022-1154)\n","status":"published","published":"2022-05-23T11:39:44Z","modified":"2026-06-25T13:31:11.735914829Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-6965-1","title":"vim vulnerabilities","description":"It was discovered that vim incorrectly handled parsing of filenames in its\nsearch functionality. If a user was tricked into opening a specially\ncrafted file, an attacker could crash the application, leading to a denial\nof service. (CVE-2021-3973)\n\nIt was discovered that vim incorrectly handled memory when opening and\nsearching the contents of certain files. If a user was tricked into opening\na specially crafted file, an attacker could crash the application, leading\nto a denial of service, or possibly achieve code execution with user\nprivileges. (CVE-2021-3974)\n\nIt was discovered that vim incorrectly handled memory when opening and\nediting certain files. If a user was tricked into opening a specially\ncrafted file, an attacker could crash the application, leading to a denial\nof service, or possibly achieve code execution with user privileges.\n(CVE-2021-3984, CVE-2021-4019, CVE-2021-4069)\n","status":"published","published":"2024-08-21T02:28:10Z","modified":"2026-06-29T13:51:14.51059556Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}