CVE-2019-20807
Fixed in a distro release EPSS <1%
In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).
Products: vim, debian_linux, opensuse leap, canonical ubuntu_linux, apple mac_os_x, starwindsoftware command_center, starwindsoftware san_&_nas
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | vim | 2:8.1.2136-1 |
| Debian 13 | vim | 2:8.1.2136-1 |
| Debian 14 | vim | 2:8.1.2136-1 |
| Debian 9 | vim | 2:8.0.0197-4+deb9u4 |
| Red Hat Enterprise Linux 8 | vim | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-X11 | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-X11-debuginfo | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-common | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-common-debuginfo | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-debuginfo | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-debugsource | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-enhanced | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-enhanced-debuginfo | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-filesystem | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-minimal | 2:8.0.1763-15.el8 |
| Red Hat Enterprise Linux 8 | vim-minimal-debuginfo | 2:8.0.1763-15.el8 |
| Rocky Linux 8 | vim | 2:8.0.1763-15.el8 |
| SUSE Enterprise Storage 5 | vim | 7.4.326-17.6.1 |
| SUSE HPE Helion OpenStack 8 | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | vim | 8.0.1568-5.6.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | vim | 8.0.1568-5.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | vim | 8.0.1568-5.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | vim | 8.0.1568-5.6.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | vim | 8.0.1568-5.6.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP2 | vim | 8.0.1568-5.6.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | vim | 7.2-8.21.6.2 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | vim | 7.2-8.21.6.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server 12 SP4 | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server 12 SP5 | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server 15-LTSS | vim | 8.0.1568-5.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | vim | 7.4.326-17.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | vim | 8.0.1568-5.6.1 |
| SUSE OpenStack Cloud 7 | vim | 7.4.326-17.6.1 |
| SUSE OpenStack Cloud 8 | vim | 7.4.326-17.6.1 |
| SUSE OpenStack Cloud Crowbar 8 | vim | 7.4.326-17.6.1 |
| Ubuntu 16.04 LTS | vim | 2:7.4.1689-3ubuntu1.5 |
| Ubuntu 18.04 LTS | vim | 2:8.0.1453-1ubuntu1.7 |
| Ubuntu 18.04 LTS | vim | 2:8.0.1453-1ubuntu1.4 |
| Ubuntu 20.04 LTS | vim | 2:8.1.2269-1ubuntu5.4 |
| Ubuntu Pro 14.04 LTS | vim | 2:7.4.052-1ubuntu3.1+esm4 |
| Ubuntu Pro 16.04 LTS | vim | 2:7.4.1689-3ubuntu1.5+esm3 |
| openSUSE Leap 15.1 | vim | 8.0.1568-lp151.5.6.1 |