Red Hat Security AdvisoryRHSA-2019:1793
vim security update
Released 2019-07-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) vim-2:7.4.160-4.el7_5.1, vim-common-2:7.4.160-4.el7_5.1, vim-enhanced-2:7.4.160-4.el7_5.1 +2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) vim-X11-2:7.4.160-4.el7_5.1
- Red Hat Enterprise Linux Server EUS (v. 7.5) vim-2:7.4.160-4.el7_5.1, vim-X11-2:7.4.160-4.el7_5.1, vim-common-2:7.4.160-4.el7_5.1 +3
Fixes 1 record
Priority MEDIUM 55
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input…
CVSS 3.0HIGH 8.6· Local · No auth · User interaction · EPSS 0.18964 · Published 2019-06-05 · Partial fix CWE-78
