Red Hat Security Advisory: vim security update
An update for vim is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12735US | high8.6 | Exploit | ||
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute… | ||||
references
External citations — patches, advisories, analysis.
remediations (42)
- Fixedvim-2:7.4.160-4.el7_5.1.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-2:7.4.160-4.el7_5.1.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-X11-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-X11-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-X11-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-common-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-common-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-common-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-debuginfo-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-debuginfo-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-debuginfo-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-debuginfo-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-enhanced-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-enhanced-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-enhanced-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-filesystem-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-filesystem-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-filesystem-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-minimal-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-minimal-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Fixedvim-minimal-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2019:1793 - Workaroundvim-2:7.4.160-4.el7_5.1.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-2:7.4.160-4.el7_5.1.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-X11-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-X11-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-X11-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-common-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-common-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-common-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-debuginfo-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-debuginfo-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-debuginfo-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-debuginfo-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-enhanced-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-enhanced-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-enhanced-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-filesystem-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-filesystem-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-filesystem-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-minimal-2:7.4.160-4.el7_5.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-minimal-2:7.4.160-4.el7_5.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
- Workaroundvim-minimal-2:7.4.160-4.el7_5.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)
The vulnerability can be triggered only if `modeline` is enabled. You can check whether `modeline` is enabled within vim via the command `:set modeline?` It can be turned off explicitly by adding `set nomodeline` in a vimrc file.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan