Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2019-1619

Опубликовано: 18 июл. 2019
Источник: oracle-oval
Платформа: Oracle Linux 7
Платформа: Oracle Linux 8

Описание

ELSA-2019-1619: vim security update (IMPORTANT)

[2:8.0.1763-11]

  • 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

vim-X11

7.4.160-6.el7_6

vim-common

7.4.160-6.el7_6

vim-enhanced

7.4.160-6.el7_6

vim-filesystem

7.4.160-6.el7_6

vim-minimal

7.4.160-6.el7_6

Oracle Linux x86_64

vim-X11

7.4.160-6.el7_6

vim-common

7.4.160-6.el7_6

vim-enhanced

7.4.160-6.el7_6

vim-filesystem

7.4.160-6.el7_6

vim-minimal

7.4.160-6.el7_6

Oracle Linux 8

Oracle Linux aarch64

vim-X11

8.0.1763-11.el8_0

vim-common

8.0.1763-11.el8_0

vim-enhanced

8.0.1763-11.el8_0

vim-filesystem

8.0.1763-11.el8_0

vim-minimal

8.0.1763-11.el8_0

Oracle Linux x86_64

vim-X11

8.0.1763-11.el8_0

vim-common

8.0.1763-11.el8_0

vim-enhanced

8.0.1763-11.el8_0

vim-filesystem

8.0.1763-11.el8_0

vim-minimal

8.0.1763-11.el8_0

Связанные CVE

Связанные уязвимости

CVSS3: 8.6
ubuntu
больше 6 лет назад

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.

CVSS3: 5.3
redhat
больше 6 лет назад

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.

CVSS3: 8.6
nvd
больше 6 лет назад

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.

CVSS3: 8.6
msrc
почти 5 лет назад

Описание отсутствует

CVSS3: 8.6
debian
больше 6 лет назад

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote ...