Medium: vim

Issue Overview: A flaw was found in vim in the restricted mode, where all commands that make use of external shells are disabled. However, it was found that users could still execute some arbitrary OS commands in the restricted mode. This flaw was fixed by filtering the functions that can call OS...

Amazon Linux AMI : vim (ALAS-2021-1474)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1474 advisory. A flaw was found in vim in the restricted mode, where all commands that make use of external shells are disabled. However, it was found that users could still execute some arbitrary OS commands in the...

Virtuozzo 6 : vim-X11 / vim-common / vim-enhanced / etc (VZLSA-2019-1774)

An update for vim is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Amazon Linux AMI : vim-common (ALAS-2020-1468) (deprecated)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1468 advisory. - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scriptin...

Integer Overflow

vim is vulnerable to integer overflows. Not properly validating values for tree length when handling a spell file may allow remote attackers to cause overflows...

CVE-2019-20807 affecting package vim 8.1.0388-7

CVE-2019-20807 affecting package vim 8.1.0388-7. An upgraded version of the package is available that resolves this issue...

CVE-2019-20079 affecting package vim 8.1.0388-6

CVE-2019-20079 affecting package vim 8.1.0388-6. An upgraded version of the package is available that resolves this issue...

USN-4582-1: Vim vulnerabilities | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected...

Oracle Linux 8 : vim (ELSA-2020-4453)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4453 advisory. - 1842755 - CVE-2019-20807 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not test...

vim security update

2:8.0.1763-15.0.1 - - Remove upstream references Orabug: 31197557 2:8.0.1763-15 - 1842755 - CVE-2019-20807 2:8.0.1763-14 - 1745476 - manpage of vim is garbled in Japanese locale...

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2020-2455)

According to the version of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces e.g.,...

openSUSE Security Update : pacemaker (openSUSE-2020-1825)

This update for pacemaker fixes the following issues : - executor: restrict certain IPC requests to Pacemaker daemons CVE-2020-25654, bsc1177916 - extra: add vim modelines to agents - extra: quote shell variables in agent code where appropriate bsc1175557 - extra: remove trailing whitespace from...

CVE-2019-12735 affecting package vim 8.1.0388-7

CVE-2019-12735 affecting package vim 8.1.0388-7. A patched version of the package is available...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2020-2455)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode

A flaw was found in vim in the restricted mode, where all commands that make use of external shells are disabled. However, it was found that users could still execute some arbitrary OS commands in the restricted mode. This flaw was fixed by filtering the functions that can call OS commands...

Moderate: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2020-2404)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : vim (RHSA-2020:4453)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4453 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: users can execute arbitrary OS commands via scripting...

Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode CVE-2019-20807 For more details about the security issues, including the impact, a CVSS score, acknowledgments, an...

RLSA-2020:4453 Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode CVE-2019-20807 For more details about the security issues, including the impact, a CVSS score, acknowledgments, an...