CVE-2021-4173

Published: Dic 27, 2021 Last Modified: Nov 03, 2025 EU-VD ID: EUVD-2021-34035 Aliases: GSD-2021-4173
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: required
Scope: unchanged
Confidentiality: low
Integrity: high
Availability: high
MEDIUM 6,8
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: partial

Description

AI Translation Available

vim is vulnerable to Use After Free

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0031
Percentile
0,5th
Updated

EPSS Score Trend (Last 90 Days)

416

Use After Free

Stable
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Availability Confidentiality
Potential Impacts:
Modify Memory Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands
Applicable Platforms
Languages: C, C++, Memory-Unsafe
Likelihood of Exploit: High
View CWE Details
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Macos by Apple

Product Information
Vendor Apple
Product Macos
Version Range Affected
From 11.0 (inclusive)
To 11.6.6 (exclusive)
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Vim by Vim

Product Information
Vendor Vim
Product Vim
Version Range Affected
To 8.2.3902 (exclusive)
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 35
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Macos by Apple

Product Information
Vendor Apple
Product Macos
Version Range Affected
To 12.3 (exclusive)
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 34
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Macos by Apple

Product Information
Vendor Apple
Product Macos
Version 10.15.7
cpe:2.3:o:apple:macos:10.15.7:security_update_2022-004:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Product Information
Vendor Apple
Product Mac Os X
Version 10.15.7
cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://seclists.org/fulldisclosure/2022/Jul/14
http://seclists.org/fulldisclosure/2022/Jul/14
http://seclists.org/fulldisclosure/2022/Mar/29
http://seclists.org/fulldisclosure/2022/Mar/29
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/35
https://github.com/vim/vim/commit/9c23f9bb5fe435b28245ba8ac…
https://github.com/vim/vim/commit/9c23f9bb5fe435b28245ba8ac65aa0ca6b902c04
https://huntr.dev/bounties/a1b236b9-89fb-4ccf-9689-ba11b471…
https://huntr.dev/bounties/a1b236b9-89fb-4ccf-9689-ba11b471e766
https://lists.debian.org/debian-lts-announce/2025/03/msg000…
https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://security.gentoo.org/glsa/202208-32
https://security.gentoo.org/glsa/202208-32
https://support.apple.com/kb/HT213183
https://support.apple.com/kb/HT213183
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213343
https://support.apple.com/kb/HT213343
http://www.openwall.com/lists/oss-security/2022/01/15/1
http://www.openwall.com/lists/oss-security/2022/01/15/1
http://seclists.org/fulldisclosure/2022/Jul/14
http://seclists.org/fulldisclosure/2022/Jul/14
http://seclists.org/fulldisclosure/2022/Mar/29
http://seclists.org/fulldisclosure/2022/Mar/29
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/35
https://github.com/vim/vim/commit/9c23f9bb5fe435b28245ba8ac…
https://github.com/vim/vim/commit/9c23f9bb5fe435b28245ba8ac65aa0ca6b902c04
https://huntr.dev/bounties/a1b236b9-89fb-4ccf-9689-ba11b471…
https://huntr.dev/bounties/a1b236b9-89fb-4ccf-9689-ba11b471e766
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://security.gentoo.org/glsa/202208-32
https://security.gentoo.org/glsa/202208-32
https://support.apple.com/kb/HT213183
https://support.apple.com/kb/HT213183
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213343
https://support.apple.com/kb/HT213343
http://www.openwall.com/lists/oss-security/2022/01/15/1
http://www.openwall.com/lists/oss-security/2022/01/15/1