USN-5093-1

Dashboard / Vulnerabilities / USN-5093-1

USN-5093-1

Summary: vim vulnerabilities

Details: Brian Carpenter discovered that vim incorrectly handled memory when opening certain files. If a user was tricked into opening a specially crafted file, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. This issue only affected Ubuntu 20.04 LTS and Ubuntu 21.04. (CVE-2021-3770) Brian Carpenter discovered that vim incorrectly handled memory when opening certain files. If a user was tricked into opening a specially crafted file, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. (CVE-2021-3778) Dhiraj Mishra discovered that vim incorrectly handled memory when opening certain files. If a user was tricked into opening a specially crafted file, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. (CVE-2021-3796)

References: https://ubuntu.com/security/notices/USN-5093-1, https://ubuntu.com/security/CVE-2021-3770, https://ubuntu.com/security/CVE-2021-3778, https://ubuntu.com/security/CVE-2021-3796