Detections
Analytics
Alpine: gvim, multiple vim packages, xxd: security update to 9.1.1164-r0
high Tenable Self-Hosted Container Security Plugin ID 427815
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages
using the `:redir` ex command to register, variables and files. It also allows to show the contents of
registers using the `:registers` or `:display` ex command. When redirecting the output of `:display` to a
register, Vim will free the register content before storing the new content in the register. Now when
redirecting the `:display` command to a register that is being displayed, Vim will free the content while
shortly afterwards trying to access it, which leads to a use-after-free. Vim pre 9.1.1115 checks in the
ex_display() function, that it does not try to redirect to a register while displaying this register at
the same time. However this check is not complete, and so Vim does not check the `+` and `*` registers
(which typically donate the X11/clipboard registers, and when a clipboard connection is not possible will
fall back to use register 0 instead. In Patch 9.1.1115 Vim will therefore skip outputting to register zero
when trying to redirect to the clipboard registers `*` or `+`. Users are advised to upgrade. There are no
known workarounds for this vulnerability. (CVE-2025-26603)
- Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows
easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim
plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized
and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar
archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using
$SHELL). The issue has been fixed as of Vim patch v9.1.1164 (CVE-2025-27423)
See Also
Plugin Details
Severity: High
ID: 427815
Version: Revision 1.8
Type: Local
Published: 5/31/2025
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.3
Percentile: 53.59
CVSS v2
Risk Factor: Medium
Base Score: 6.6
Temporal Score: 4.9
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:N
CVSS Score Source: CVE-2025-27423
CVSS v3
Risk Factor: High
Base Score: 7.1
Temporal Score: 6.2
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/18/2025
Reference Information
CVE: CVE-2025-26603, CVE-2025-27423
IAVA: 2025-A-0128-S