High ELSA-2019-1619 1 CVE

Important: vim security update (Oracle Linux 7)

Published Jul 18, 2019 · Updated Jul 18, 2019

Ecosystem: Oracle Linux

Summary

[2:8.0.1763-11]
- 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	vim-common	2:8.0.1763-11.el8_0
Oracle Linux · 7	vim-enhanced	2:8.0.1763-11.el8_0
Oracle Linux · 7	vim-filesystem	2:8.0.1763-11.el8_0
Oracle Linux · 7	vim-minimal	2:8.0.1763-11.el8_0
Oracle Linux · 7	vim-X11	2:8.0.1763-11.el8_0

Vulnerabilities 1

Unscored —

CVE-2019-12735 Public exploit EPSS 19%

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via t…

vim vim vim neovim Debian Ubuntu Alpine

Jun 5, 2019