CVE-2021-3928

Katalog CVE

CVSS 7.8 · High EPSS 0,64%

Kerentanan Use of Uninitialized Variable pada vim, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

vim is vulnerable to Use of Uninitialized Variable

Rincian

Terbit di NVD

5 November 2021

Terakhir diubah

8 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-457: Use of Uninitialized Variable
CWE-908: Use of Uninitialized Resource

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vim/vim/commit/15d9890eee53afc61eb0a03b878a19cb5672f732 patch · advisory pihak ketiga
• https://huntr.dev/bounties/29c3ebd2-d601-481c-bf96-76975369d0cd exploit · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html mitigasi · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2022/01/15/1 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-32 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BCQWPEY2AEYBE...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7U...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGW56Z6IN4UVM...