PT-2019-6248 · Vim+8 · Vim+8
CVSS v3.1
5.3
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Vim versions prior to 8.1.0881
Description
The issue is related to the lack of input sanitization in the Vim text editor, allowing an attacker to access confidential data, compromise its integrity, and cause a denial of service. In Vim, users can circumvent the restricted mode and execute arbitrary OS commands via scripting interfaces such as Python, Ruby, or Lua.
Recommendations
For versions prior to 8.1.0881, update to version 8.1.0881 or later to resolve the issue. As a temporary workaround, consider restricting access to scripting interfaces like Python, Ruby, or Lua until a patch is applied.
Exploit
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Centos
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
Vim