High DLA-2876-1 4 CVEs

vim - security update

Published Jan 10, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	vim	2:8.0.0197-4+deb9u4

Vulnerabilities 4

High 8.2

CVE-2021-3796

Use After Free in vim/vim

vim is vulnerable to Use After Free

vim vim/vim vim vim Debian Ubuntu Alpine

Sep 15, 2021
High 7.8

CVE-2021-3778

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Sep 15, 2021
Unscored —

CVE-2017-17087

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be d…

vim vim Debian Ubuntu

Dec 1, 2017
Unscored —

CVE-2019-20807

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting i…

vim vim Debian Ubuntu

May 28, 2020