Skip to content
OpenAdvisories
Unscored DLA-1871-1 3 CVEs

vim - security update

Published Aug 3, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 vim 2:7.4.488-7+deb8u4

Vulnerabilities 3

  • Unscored —
    CVE-2017-11109

    Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a cr…

    vim vim Debian Ubuntu
  • Unscored —
    CVE-2017-17087

    fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be d…

    vim vim Debian Ubuntu
  • Unscored —
    CVE-2019-12735 Public exploit EPSS 19%

    getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via t…

    vim vim vim neovim Debian Ubuntu Alpine