Candidate: CVE-2021-4136 PublicDate: 2021-12-19 17:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4136 https://huntr.dev/bounties/5c6b93c1-2d27-4e98-a931-147877b8c938 https://github.com/vim/vim/commit/605ec91e5a7330d61be313637e495fa02a6dc264 Description: vim is vulnerable to Heap-based Buffer Overflow Ubuntu-Description: Notes: Mitigation: Bugs: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002534 Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [7.8 HIGH] Patches_vim: upstream_vim: needs-triage trusty/esm_vim: needs-triage esm-infra/xenial_vim: needs-triage trusty_vim: ignored (out of standard support) xenial_vim: ignored (out of standard support) bionic_vim: needs-triage focal_vim: needs-triage hirsute_vim: ignored (reached end-of-life) impish_vim: needs-triage jammy_vim: needs-triage devel_vim: needs-triage