Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Ubuntu 21.10: USN-5247-1 Critical: Vim Denial of Service Threats

ubuntu
Calendar Grey January 27, 2022
Dist Ubuntu Esm H88
Numerous vulnerabilities patched in Vim for various Ubuntu releases, accompanied by suggestions to mitigate risks of exploitation or system stability issues.
Several security issues were fixed in Vim.

Summary

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

It was discovered that vim incorrectly handled parsing of filenames in its

search functionality. If a user was tricked into opening a specially crafted

file, an attacker could crash the application, leading to a denial of

service. This issue only affected Ubuntu 21.10. (CVE-2021-3973)

It was discovered that vim incorrectly handled memory when opening and

searching the contents of certain files. If a user was tricked into opening

a specially crafted file, an attacker could crash the application,

leading to

a denial of service, or possibly achieve code execution with user

privileges.

This issue only affected Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2021-3974)

It was discovered that vim incorrectly handled memory when opening and

editing

certain files. If a user was tricked into opening a specially crafted

file, an

attacker could crash the ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical issue ubuntu vim

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
vim 2:8.2.2434-3ubuntu3.2

Ubuntu 20.04 LTS:
vim 2:8.1.2269-1ubuntu5.6

Ubuntu 18.04 LTS:
vim 2:8.0.1453-1ubuntu1.8

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5247-1

CVE-2021-3973, CVE-2021-3974, CVE-2021-3984, CVE-2021-4019,

CVE-2021-4069

Severity
critical
Lowest
Low
Medium
High
Critical

January 27, 2022

Topics%20covered

Topics Covered

security advisory denial of service critical issue ubuntu vim

Package Information

https://launchpad.net/ubuntu/+source/vim/2:8.2.2434-3ubuntu3.2
https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.6
https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.8

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.