The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-1619 advisory.

    [2:8.0.1763-11]
    - 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for vim is now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es) :

* vim/neovim: ':source!' command allows arbitrary command execution via modelines (CVE-2019-12735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

According to the version of the vim packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - It was found that the `:source!` command was not     restricted by the sandbox mode. If modeline was     explicitly enabled, opening a specially crafted text     file in vim could result in arbitrary command     execution.(CVE-2019-12735)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several minor issues have been fixed in vim, a highly configurable text editor.

CVE-2017-11109

Vim allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file.

CVE-2017-17087

Vim sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership.

CVE-2019-12735

Vim did not restrict the `:source!` command when executed in a sandbox.

For Debian 8 'Jessie', these problems have been fixed in version 2:7.4.488-7+deb8u4.

We recommend that you upgrade your vim packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3915:02 advisory.

    * vim/neovim: ':source!' command allows arbitrary command execution via modelines (CVE-2019-12735)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0031 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2019-12735:
    getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS     commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or     nvim_input in Neovim.

    CVE-2019-20807:
    In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands     via scripting interfaces (e.g., Python, Ruby, or Lua).

    CVE-2021-3778:
    vim is vulnerable to Heap-based Buffer Overflow

    CVE-2021-3796:
    vim is vulnerable to Use After Free

    CVE-2022-1154:
    Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
126316	Oracle Linux 7 / 8 : vim (ELSA-2019-1619)	Nessus	Oracle Linux Local Security Checks	2019/6/28	2024/10/22	high
126387	CentOS 7 : vim (CESA-2019:1619)	Nessus	CentOS Local Security Checks	2019/7/2	2019/12/31	high
126541	EulerOS Virtualization for ARM 64 3.0.2.0 : vim (EulerOS-SA-2019-1699)	Nessus	Huawei Local Security Checks	2019/7/9	2024/5/10	high
127480	Debian DLA-1871-1 : vim security update	Nessus	Debian Local Security Checks	2019/8/12	2024/5/7	high
289244	MiracleLinux 7 : vim-7.4.160-6.el7 (AXSA:2019-3915:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
239255	TencentOS Server 3: vim (TSSA-2022:0031)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high

检测

插件搜索

high

high

high

high

high

high