Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 21.04, 20.04 LTS Vulnerability: USN-5093-1 Critical Vim Memory Error

ubuntu
Calendar Grey September 28, 2021
Dist Ubuntu Esm H88
Tackling a range of vulnerabilities in Emacs on Debian platforms, rectifying heap overflow issues to avert service interruptions and arbitrary code execution.
Several security issues were fixed in Vim.

Summary

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

Brian Carpenter discovered that vim incorrectly handled memory

when opening certain files. If a user was tricked into opening

a specially crafted file, a remote attacker could crash the

application, leading to a denial of service, or possibly execute

arbitrary code with user privileges. This issue only affected

Ubuntu 20.04 LTS and Ubuntu 21.04. (CVE-2021-3770)

Brian Carpenter discovered that vim incorrectly handled memory

when opening certain files. If a user was tricked into opening

a specially crafted file, a remote attacker could crash the

application, leading to a denial of service, or possibly execute

arbitrary code with user privileges. (CVE-2021-3778)

Dhiraj Mishra discovered that vim incorrectly handled memory

when opening certain files. If a user was tricked into opening

a specially crafted file, a remote attacker could crash the

application, leading to a...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical Ubuntu vim memory error

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  vim                             2:8.2.2434-1ubuntu1.1

Ubuntu 20.04 LTS:
  vim                             2:8.1.2269-1ubuntu5.3

Ubuntu 18.04 LTS:
  vim                             2:8.0.1453-1ubuntu1.6

Ubuntu 16.04 ESM:
  vim                             2:7.4.1689-3ubuntu1.5+esm2

Ubuntu 14.04 ESM:
  vim                             2:7.4.052-1ubuntu3.1+esm3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5093-1

CVE-2021-3770, CVE-2021-3778, CVE-2021-3796

Severity
critical
Lowest
Low
Medium
High
Critical

September 28, 2021

Topics%20covered

Topics Covered

security advisory critical Ubuntu vim memory error

Package Information

https://launchpad.net/ubuntu/+source/vim/2:8.2.2434-1ubuntu1.1
https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.3
https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.