In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:4453 advisory.

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4582-1 advisory.

  - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group     (which may be different from the group ownership of the original file), which allows local users to obtain     sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned     by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability     than CVE-2017-1000382. (CVE-2017-17087)

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2020:4453 advisory.

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2876 advisory.

  - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group     (which may be different from the group ownership of the original file), which allows local users to obtain     sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned     by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability     than CVE-2017-1000382. (CVE-2017-17087)

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3778)

  - vim is vulnerable to Use After Free (CVE-2021-3796)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5147-1 advisory.

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3872, CVE-2021-3903, CVE-2021-3927)

  - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group     (which may be different from the group ownership of the original file), which allows local users to obtain     sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned     by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability     than CVE-2017-1000382. (CVE-2017-17087)

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

  - vim is vulnerable to Use of Uninitialized Variable (CVE-2021-3928)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:14385-1 advisory.

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has vim packages installed that are affected by a vulnerability:

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4453 advisory.

  - vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode     (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1474 advisory.

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4453 advisory.

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - In Vim before 8.1.0881, users can circumvent the rvim     restricted mode and execute arbitrary OS commands via     scripting interfaces (e.g., Python, Ruby, or     Lua).(CVE-2019-20807)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4453 advisory.

  - vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode     (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Vim before 8.1.0881, users can circumvent the rvim     restricted mode and execute arbitrary OS commands via     scripting interfaces (e.g., Python, Ruby, or     Lua).(CVE-2019-20807)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-004, 10.14.x prior to 10.14.6 Security Update 2020-004, or 10.15.x prior to 10.15.6. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious     access point, or an adjacent user, to determine if a connected user is using a VPN, make positive     inferences about the websites they are visiting, and determine the correct sequence and acknowledgement     numbers in use, allowing the bad actor to inject data into the TCP stream. This provides everything that     is needed for an attacker to hijack active connections inside the VPN tunnel. (CVE-2019-14899)

  - cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote     denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an     off-by-one error in _sasl_add_string in common.c in cyrus-sasl. (CVE-2019-19906)

  - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua). (CVE-2019-20807)

  - rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the     synchronization path. (CVE-2014-9512)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

According to the version of the vim packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In Vim before 8.1.0881, users can circumvent the rvim     restricted mode and execute arbitrary OS commands via     scripting interfaces (e.g., Python, Ruby, or     Lua).(CVE-2019-20807)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the vim packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - A flaw was found in vim in the restricted mode, where     all commands that make use of external shells are     disabled. However, it was found that users could still     execute some arbitrary OS commands in the restricted     mode. This flaw was fixed by filtering the functions     that can call OS commands. Interfaces such as Python,     Ruby, and Lua, are also disabled, as they can be used     to execute shell commands. Perl uses the Safe     module.(CVE-2019-20807)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for vim fixes the following issues :

  - CVE-2019-20807: Fixed an issue where escaping from the     restrictive mode of vim was possible using interfaces     (bsc#1172225). 

This update was imported from the SUSE:SLE-15:Update update project.

An update of the vim package has been released.

This update for vim fixes the following issues :

CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim was possible using interfaces (bsc#1172225).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for vim fixes the following issues :

CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim was possible using interfaces (bsc#1172225 and bsc#1172031).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
184961	Rocky Linux 8 : vim (RLSA-2020:4453)	Nessus	Rocky Linux Local Security Checks	medium
183639	Ubuntu 16.04 LTS / 18.04 LTS : Vim vulnerabilities (USN-4582-1)	Nessus	Ubuntu Local Security Checks	medium
157498	AlmaLinux 8 : vim (ALSA-2020:4453)	Nessus	Alma Linux Local Security Checks	medium
156575	Debian DLA-2876-1 : vim - LTS security update	Nessus	Debian Local Security Checks	high
155351	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Vim vulnerabilities (USN-5147-1)	Nessus	Ubuntu Local Security Checks	high
150673	SUSE SLES11 Security Update : vim (SUSE-SU-2020:14385-1)	Nessus	SuSE Local Security Checks	medium
147392	NewStart CGSL MAIN 6.02 : vim Vulnerability (NS-SA-2021-0074)	Nessus	NewStart CGSL Local Security Checks	medium
145865	CentOS 8 : vim (CESA-2020:4453)	Nessus	CentOS Local Security Checks	medium
144995	Amazon Linux AMI : vim (ALAS-2021-1474)	Nessus	Amazon Linux Local Security Checks	medium
142791	Oracle Linux 8 : vim (ELSA-2020-4453)	Nessus	Oracle Linux Local Security Checks	medium
142512	EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2020-2455)	Nessus	Huawei Local Security Checks	medium
142440	RHEL 8 : vim (RHSA-2020:4453)	Nessus	Red Hat Local Security Checks	medium
142335	EulerOS 2.0 SP2 : vim (EulerOS-SA-2020-2404)	Nessus	Huawei Local Security Checks	medium
141100	macOS 10.15.x < 10.15.6 / 10.14.x < 10.14.6 Security Update 2020-004 / 10.13.x < 10.13.6 Security Update 2020-004	Nessus	MacOS X Local Security Checks	critical
140949	EulerOS Virtualization for ARM 64 3.0.6.0 : vim (EulerOS-SA-2020-2001)	Nessus	Huawei Local Security Checks	medium
140901	EulerOS 2.0 SP3 : vim (EulerOS-SA-2020-2134)	Nessus	Huawei Local Security Checks	medium
140327	EulerOS Virtualization for ARM 64 3.0.2.0 : vim (EulerOS-SA-2020-1957)	Nessus	Huawei Local Security Checks	medium
140155	EulerOS 2.0 SP5 : vim (EulerOS-SA-2020-1934)	Nessus	Huawei Local Security Checks	medium
139990	EulerOS 2.0 SP8 : vim (EulerOS-SA-2020-1887)	Nessus	Huawei Local Security Checks	medium
138676	openSUSE Security Update : vim (openSUSE-2020-794)	Nessus	SuSE Local Security Checks	medium
137644	Photon OS 1.0: Vim PHSA-2020-1.0-0300	Nessus	PhotonOS Local Security Checks	medium
137590	SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2020:1551-1)	Nessus	SuSE Local Security Checks	medium
137589	SUSE SLES12 Security Update : vim (SUSE-SU-2020:1550-1)	Nessus	SuSE Local Security Checks	medium
137202	Photon OS 3.0: Vim PHSA-2020-3.0-0102	Nessus	PhotonOS Local Security Checks	medium
137196	Photon OS 2.0: Vim PHSA-2020-2.0-0251	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2019-20807

medium

Tenable Plugins

medium

medium

medium

high

high

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium