PT-2018-10477 · Vim · Syntastic

Enrico Zini · Published 2018-05-20 · Updated 2019-10-03 · CVE-2018-11319

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Syntastic (aka vim-syntastic) versions prior to 3.9.0

Description The issue arises from improper handling of searches for configuration files, where the search spans from the current directory up to potentially the root. This could potentially be exploited for arbitrary code execution via a malicious gcc plugin, provided an attacker has write access to a directory that is a parent of the project's base directory. It's noted that exploitation becomes more challenging after version 3.8.0, as it may require filename prediction.

Recommendations For versions prior to 3.9.0, update to version 3.9.0 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-11319

DLA-1444-1

DSA-4261-1

Affected Products

Syntastic

References · 19

• 🔥 https://github.com/vim-syntastic/syntastic/issues/2170 · Exploit
• 🔥 https://bugs.debian.org/894736 · Exploit
• https://github.com/vim-syntastic/syntastic/commit/6d7c0b394e001233dd09ec473fbea2002c72632f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-11319 · Security Note
• https://osv.dev/vulnerability/CVE-2018-11319 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-11319 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4261-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-4261-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-1444-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/vim-syntastic · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1444-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-11319 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-11319 · Vendor Advisory
• https://debian.org/security/2018/dsa-4261 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-11319 · Vendor Advisory