Red Hat Security AdvisoryRHSA-2020:4453
vim security update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) vim-X11-2:8.0.1763-15.el8, vim-common-2:8.0.1763-15.el8, vim-enhanced-2:8.0.1763-15.el8 +1
- Red Hat Enterprise Linux BaseOS (v. 8) vim-2:8.0.1763-15.el8, vim-minimal-2:8.0.1763-15.el8
Fixes 1 record
Priority LOW 25
In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00488 · Published 2020-05-28 · Partial fix CWE-78
