In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).
[
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-17ab1ca8",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "f_pyxeval",
"file": "src/evalfunc.c"
},
"signature_type": "Function",
"digest": {
"length": 307.0,
"function_hash": "184130113731174592183344161800413174107"
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-19b84298",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "f_py3eval",
"file": "src/evalfunc.c"
},
"signature_type": "Function",
"digest": {
"length": 197.0,
"function_hash": "187371314401695224819360221639048846513"
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-4cfc0307",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/evalfunc.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"9080343361829260520971137938195072900",
"106042209952997796840899028662232101515",
"304836589597102166411351263947518119322",
"71026328123205413090070822253411220662",
"116000159262457596022944079085790974734",
"12524768265974968815066832710808915111",
"258308727018778827919021356983145126373",
"116000159262457596022944079085790974734",
"48034795266817749779326915783309043636",
"208647443185339919365708416704797707288",
"96450218680459444622661979416557747892",
"48262851359454685621365020146588500630",
"303398165558118533568912213293842028335",
"96450218680459444622661979416557747892",
"319726743473062238495792116600376566100",
"181817888830744303769858591221236535746",
"312571904400349605786577834339539939315",
"89260055697134584644239477777500973682",
"46877655679414180970442145271007410717",
"249157992283471079262165001855181515162",
"165894333088028759138026658230932818851",
"154729555646592018515911004664056954016",
"39243042904416227182282068340406996365",
"190700653982227759149960883522389675223",
"229034568656184302343473178027514620949",
"93619720859634513692841745690833547920",
"171100187566483446584777205304889323861",
"121970686064115557009417115526905445029",
"45110903031826957482257216637521307255",
"180571134028201081397474266051378097504",
"204670244304176714111538341405553008240",
"162398452172501510309086737087825094044"
]
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-4f73b5de",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/ex_cmds.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"333827169890607588091630955887544014601",
"294014202066586698942868729393161839417",
"159810873078533562544154211402212070290",
"53311882653266312664149888289974714972"
]
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-7a6e5d04",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "f_settabvar",
"file": "src/evalfunc.c"
},
"signature_type": "Function",
"digest": {
"length": 673.0,
"function_hash": "98529159721548410210698050833299899110"
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-9f20335b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "check_restricted",
"file": "src/ex_cmds.c"
},
"signature_type": "Function",
"digest": {
"length": 150.0,
"function_hash": "327025616794677725615367981023182467748"
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-aed25c53",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "f_writefile",
"file": "src/evalfunc.c"
},
"signature_type": "Function",
"digest": {
"length": 1750.0,
"function_hash": "62726684447263577545467327825281159859"
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-b5ae62b8",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "f_pyeval",
"file": "src/evalfunc.c"
},
"signature_type": "Function",
"digest": {
"length": 197.0,
"function_hash": "262091683188958663334764613222945854824"
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-ba67cbad",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/version.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146200493773228420153804765641940418619",
"330181963505026474875079939931077045170",
"208653747698239218921973381116690908028",
"223716774409976112041010148398574403018"
]
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-fd0725a9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/ex_docmd.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"234923997843297838271399130606587766018",
"29771070190634396179139548123799042397",
"163516767509762382095997169800590896073",
"112893288628765956434322924483877010173",
"68780107761809981441330735091547751949",
"337176725719248667021570232244345783572",
"167080820117920634780806443480600674692"
]
}
},
{
"source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075",
"id": "CVE-2019-20807-ff6dd44b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "f_luaeval",
"file": "src/evalfunc.c"
},
"signature_type": "Function",
"digest": {
"length": 179.0,
"function_hash": "72587713356356416042582268604158149412"
}
}
]