Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 556
Alerts This Week
Warning Icon 1 556

Ubuntu 16.04 ESM USN-5433-1 Critical: Multiple Vim DoS Threats

ubuntu
Calendar Grey May 23, 2022
Dist Ubuntu Esm H88
Several significant security flaws in Vim for Ubuntu 16.04 ESM have been addressed to safeguard against Denial of Service attacks and potential exploits.
Several security issues were fixed in Vim.

Summary

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

It was discovered that Vim incorrectly handled parsing of filenames in its

search functionality. If a user were tricked into opening a specially

crafted

file, an attacker could crash the application, leading to a denial of

service. (CVE-2021-3973)

It was discovered that Vim incorrectly handled memory when opening and

searching the contents of certain files. If a user were tricked into opening

a specially crafted file, an attacker could crash the application,

leading to

a denial of service, or possibly achieve code execution with user

privileges.

(CVE-2021-3974)

It was discovered that Vim incorrectly handled memory when opening and

editing certain files. If a user were tricked into opening a specially

crafted file,

an attacker could crash the application, leading to a denial of service, or

possibly achieve code execution with user privi...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service ubuntu vim code issues

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   vim                             2:7.4.1689-3ubuntu1.5+esm4

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-5433-1

  CVE-2021-3973, CVE-2021-3974, CVE-2021-3984, CVE-2021-4019,

  CVE-2021-4069, CVE-2021-4192, CVE-2022-0261, CVE-2022-0318,

  CVE-2022-1154

Severity
critical
Lowest
Low
Medium
High
Critical

May 23, 2022

Topics%20covered

Topics Covered

security advisory denial of service ubuntu vim code issues

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.