Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
vim-common
(any)
vim-debugsource
(any)
vim-enhanced
(any)
vim-filesystem
(any)
vim-minimal
(any)
vim-X11
(any)
Описание
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode (CVE-2019-20807)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Security Fix(es):
* vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode (CVE-2019-20807)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Как исправить
Используйте рекомендации производителя, доступные по ссылке https://access.redhat.com/knowledge/articles/11258
Ссылки
Источник: CVE
Наименование: CVE-2019-20807
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20807
https://access.redhat.com/errata/RHSA-2020:4453
Наименование: CVE-2019-20807
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20807
https://access.redhat.com/errata/RHSA-2020:4453
