CVE catalog

CVE-2021-3928

vim: CVE-2021-3928

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.64% · Oct 25, 2026

vim is vulnerable to Use of Uninitialized Variable

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianvimsid2:9.2.0858-1fixed
Debianvimforky2:9.2.0858-1fixed
Debianvimtrixie2:9.1.1230-2fixed
Debianvimbookworm2:9.0.1378-2+deb12u2fixed
CpevimNot reported8.2.3582fixed
CpefedoraNot reportedNot reportedunknown
Cpedebian_linuxNot reportedNot reportedunknown
Alpinevim3.128.2.3650-r0fixed
Alpinevim3.138.2.3650-r0fixed
Alpinevim3.148.2.3650-r0fixed
Alpinevim3.158.2.3650-r0fixed
Alpinevim3.168.2.3650-r0fixed
Alpinevim3.178.2.3650-r0fixed
Alpinevim3.188.2.3650-r0fixed
Alpinevim3.198.2.3650-r0fixed
Alpinevim3.208.2.3650-r0fixed
Alpinevim3.218.2.3650-r0fixed
Alpinevim3.228.2.3650-r0fixed
Alpinevim3.238.2.3650-r0fixed
Susevimlinux enterprise micro 5.39.0.0814-150000.5.28.1fixed
Susevimlinux enterprise module for basesystem 15 sp39.0.0814-150000.5.28.1fixed
Susevimlinux enterprise module for basesystem 15 sp49.0.0814-150000.5.28.1fixed
Susevimlinux enterprise module for desktop applications 15 sp39.0.0814-150000.5.28.1fixed
Susevimlinux enterprise module for desktop applications 15 sp49.0.0814-150000.5.28.1fixed
Susevimlinux enterprise high performance computing 15-espos9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise high performance computing 15-ltss9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise high performance computing 15 sp1-espos9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise high performance computing 15 sp1-ltss9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise high performance computing 15 sp2-espos9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise high performance computing 15 sp2-ltss9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise server 15-ltss9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise server 15 sp1-bcl9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise server 15 sp1-ltss9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise server 15 sp2-bcl9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise server 15 sp2-ltss9.0.0814-150000.5.28.1fixed
Susevimlinux enterprise server for sap applications 159.0.0814-150000.5.28.1fixed
Susevimlinux enterprise server for sap applications 15 sp19.0.0814-150000.5.28.1fixed
Susevimlinux enterprise server for sap applications 15 sp29.0.0814-150000.5.28.1fixed
Susevimmanager proxy 4.19.0.0814-150000.5.28.1fixed
Susevimmanager retail branch server 4.19.0.0814-150000.5.28.1fixed
Susevimmanager server 4.19.0.0814-150000.5.28.1fixed
Susevimlinux enterprise micro 5.19.0.0814-150000.5.28.1fixed
Susevimlinux enterprise micro 5.29.0.0814-150000.5.28.1fixed
Susevimenterprise storage 69.0.0814-150000.5.28.1fixed
Susevimenterprise storage 79.0.0814-150000.5.28.1fixed
Opensusevimleap micro 5.29.0.0814-150000.5.28.1fixed
Opensusevimleap micro 5.39.0.0814-150000.5.28.1fixed
Opensusevimleap 15.39.0.0814-150000.5.28.1fixed
Opensusevimleap 15.49.0.0814-150000.5.28.1fixed
Ubuntuvimpro2:7.4.712-2ubuntu4vulnerable
Ubuntuvimpro2:7.4.826-1ubuntu1vulnerable
Ubuntuvimpro2:7.4.826-1ubuntu2vulnerable
Ubuntuvimpro2:7.4.826-1ubuntu3vulnerable
Ubuntuvimpro2:7.4.963-1ubuntu1vulnerable
Ubuntuvimpro2:7.4.963-1ubuntu4vulnerable
Ubuntuvimpro2:7.4.963-1ubuntu5vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.1vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.2vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.3vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.4vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm2vulnerable
Ubuntuvimpro2:7.4.1689-3ubuntu1.5+esm3fixed
Ubuntuvim18.042:8.0.0197-4ubuntu5vulnerable
Ubuntuvim18.042:8.0.1144-1ubuntu1vulnerable
Ubuntuvim18.042:8.0.1401-1ubuntu1vulnerable
Ubuntuvim18.042:8.0.1401-1ubuntu2vulnerable
Ubuntuvim18.042:8.0.1401-1ubuntu3vulnerable
Ubuntuvim18.042:8.0.1453-1ubuntu1vulnerable
Ubuntuvim18.042:8.0.1453-1ubuntu1.1vulnerable
Ubuntuvim18.042:8.0.1453-1ubuntu1.3vulnerable
Ubuntuvim18.042:8.0.1453-1ubuntu1.4vulnerable
Ubuntuvim18.042:8.0.1453-1ubuntu1.6vulnerable
Ubuntuvim18.042:8.0.1453-1ubuntu1.7fixed
Ubuntuvim20.042:8.1.0875-5ubuntu2vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu3vulnerable
Ubuntuvim20.042:8.1.0875-5ubuntu4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu1vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu4vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.3vulnerable
Ubuntuvim20.042:8.1.2269-1ubuntu5.4fixed
Ubuntuvim22.042:8.2.2434-3ubuntu3vulnerable
Ubuntuvim22.042:8.2.2434-3ubuntu4vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu1vulnerable
Ubuntuvim22.042:8.2.3565-1ubuntu2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianvimsourcesid2:8.2.3995-1unimportantNot reportedNot reported
Debianvimsourceforky2:8.2.3995-1unimportantNot reportedNot reported
Debianvimsourcetrixie2:8.2.3995-1unimportantNot reportedNot reported
Debianvimsourcebookworm2:8.2.3995-1unimportantNot reportedNot reported
CpevimcpeNot reported8.2.3582Not reportedNVD-CVE-2021-3928Not reported
Alpinevimapk3.128.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.138.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.148.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.158.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.168.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.178.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.188.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.198.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.208.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.218.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.228.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Alpinevimapk3.238.2.3650-r0Not reportedALPINE-CVE-2021-3928Not reported
Susevimrpmlinux enterprise micro 5.39.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise module for basesystem 15 sp39.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise module for basesystem 15 sp49.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise module for desktop applications 15 sp39.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise module for desktop applications 15 sp49.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise high performance computing 15-espos9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise high performance computing 15-ltss9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise high performance computing 15 sp1-espos9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise high performance computing 15 sp1-ltss9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise high performance computing 15 sp2-espos9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise high performance computing 15 sp2-ltss9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise server 15-ltss9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise server 15 sp1-bcl9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise server 15 sp1-ltss9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise server 15 sp2-bcl9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise server 15 sp2-ltss9.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise server for sap applications 159.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise server for sap applications 15 sp19.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise server for sap applications 15 sp29.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmmanager proxy 4.19.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmmanager retail branch server 4.19.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmmanager server 4.19.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise micro 5.19.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmlinux enterprise micro 5.29.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmenterprise storage 69.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Susevimrpmenterprise storage 79.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Opensusevimrpmleap micro 5.29.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Opensusevimrpmleap micro 5.39.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Opensusevimrpmleap 15.39.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Opensusevimrpmleap 15.49.0.0814-150000.5.28.1Not reportedSUSE-SU-2022:4282-1Not reported
Ubuntuvimdebpro2:7.4.1689-3ubuntu1.5+esm3Not reportedUBUNTU-CVE-2021-3928Not reported
Ubuntuvimdeb18.042:8.0.1453-1ubuntu1.7Not reportedUBUNTU-CVE-2021-3928Not reported
Ubuntuvimdeb20.042:8.1.2269-1ubuntu5.4Not reportedUBUNTU-CVE-2021-3928Not reported
Ubuntuvimdeb22.042:8.2.3565-1ubuntu2Not reportedUBUNTU-CVE-2021-3928Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [vim]Fixed
    Details (2)
    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • [vim-athena]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • [vim-common]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • [vim-doc]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • [vim-gtk3]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • [vim-motif]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • [vim-nox]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · all · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • [vim-tiny]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

  • [xxd]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.0.1378-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

    • 2:9.0.1378-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · bookworm; dsa · vim · debian · 12

[Debian 13 (Trixie)]

  • [vim]Fixed
    Details (2)
    • 2:9.1.1230-2 · amd64 · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · arm64 · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

  • [vim-athena]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

  • [vim-common]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

  • [vim-doc]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

  • [vim-gtk3]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.1.1230-2 · amd64 · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · arm64 · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

  • Source package: [vim]

    Details (2)
    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

  • [vim-motif]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.1.1230-2 · amd64 · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · arm64 · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

  • [vim-nox]Fixed

    Source package: [vim]

    Details (2)
    • 2:9.1.1230-2 · amd64 · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · arm64 · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

  • Source package: [vim]

    Details (2)
    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

    • 2:9.1.1230-2 · all · trixie

      Fixed · Fixed: 2:8.2.3995-1

      dsa · vim · debian · 13

Next results

Observed:

References