The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4862-1 advisory.

    It was discovered that Neovim incorrectly handled certain files. An attacker could possibly use this issue     to cause a denial of service or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0031 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2019-12735:
    getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS     commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or     nvim_input in Neovim.

    CVE-2019-20807:
    In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua).

    CVE-2021-3778:
    vim is vulnerable to Heap-based Buffer Overflow

    CVE-2021-3796:
    vim is vulnerable to Use After Free

    CVE-2022-1154:
    Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4016-1 advisory.

    It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to     execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-5953)

    It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to     execute arbitrary code. (CVE-2019-12735)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for neovim fixes the following issues :

Security issue fixed :

  - CVE-2019-12735: Fixed a potential arbitrary code     execution vulnerability in getchar.c (bsc#1137443).&#9;

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1619 advisory.

    [2:8.0.1763-11]
    - 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for vim is now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es) :

* vim/neovim: ':source!' command allows arbitrary command execution via modelines (CVE-2019-12735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

According to the version of the vim packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - It was found that the `:source!` command was not     restricted by the sandbox mode. If modeline was     explicitly enabled, opening a specially crafted text     file in vim could result in arbitrary command     execution.(CVE-2019-12735)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3915:02 advisory.

    * vim/neovim: ':source!' command allows arbitrary command execution via modelines (CVE-2019-12735)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several minor issues have been fixed in vim, a highly configurable text editor.

CVE-2017-11109

Vim allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file.

CVE-2017-17087

Vim sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership.

CVE-2019-12735

Vim did not restrict the `:source!` command when executed in a sandbox.

For Debian 8 'Jessie', these problems have been fixed in version 2:7.4.488-7+deb8u4.

We recommend that you upgrade your vim packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of AOS installed on the remote host is prior to 5.10.9. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.10.9 advisory.

  - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow     can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels,     assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass     invalid utf-8 strings to functions like pango_itemize. (CVE-2019-1010238)

  - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal     function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how     large temporary storage area to allocate from the heap. The length value is then subsequently used to     iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit     size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31     bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the     intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is     almost identical to CVE-2017-8816.) (CVE-2018-14618)

  - An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can     send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed     later on, leading to DoS (segmentation fault). (CVE-2018-14598)

  - An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable     to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other     impact. (CVE-2018-14599)

  - An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a     variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading     to DoS or remote code execution. (CVE-2018-14600)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
183163	Ubuntu 18.04 ESM : Neovim vulnerability (USN-4862-1)	Nessus	Ubuntu Local Security Checks	2023/10/16	2024/8/27	high
239255	TencentOS Server 3: vim (TSSA-2022:0031)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
125853	Ubuntu 16.04 LTS / 18.04 LTS : Vim vulnerabilities (USN-4016-1)	Nessus	Ubuntu Local Security Checks	2019/6/12	2025/9/3	critical
125918	openSUSE Security Update : neovim (openSUSE-2019-1551)	Nessus	SuSE Local Security Checks	2019/6/14	2024/5/16	high
126316	Oracle Linux 7 / 8 : vim (ELSA-2019-1619)	Nessus	Oracle Linux Local Security Checks	2019/6/28	2024/10/22	high
126387	CentOS 7 : vim (CESA-2019:1619)	Nessus	CentOS Local Security Checks	2019/7/2	2019/12/31	high
126541	EulerOS Virtualization for ARM 64 3.0.2.0 : vim (EulerOS-SA-2019-1699)	Nessus	Huawei Local Security Checks	2019/7/9	2024/5/10	high
289244	MiracleLinux 7 : vim-7.4.160-6.el7 (AXSA:2019-3915:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
127480	Debian DLA-1871-1 : vim security update	Nessus	Debian Local Security Checks	2019/8/12	2024/5/7	high
164581	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.10.9)	Nessus	Misc.	2022/9/1	2025/7/22	critical

检测

插件搜索

high

high

critical

high

high

high

high

high

high

critical