Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filename field contains backtick syntax (e.g., command), Vim executes the embedded command via the system shell with the full privileges of the running user.
{
"binaries": [
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim-athena"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim-common"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim-nox"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:8.2.3995-1ubuntu2.29",
"binary_name": "xxd"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim-athena"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim-common"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim-motif"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim-nox"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:9.1.0016-1ubuntu7.13",
"binary_name": "xxd"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim-athena"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim-common"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim-motif"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim-nox"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:9.1.0967-1ubuntu6.4",
"binary_name": "xxd"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "vim"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "vim-common"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "vim-motif"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "vim-nox"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:9.1.2141-1ubuntu4.1",
"binary_name": "xxd"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-athena"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-common"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-gnome"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-lesstif"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-nox"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:7.4.052-1ubuntu3.1+esm27",
"binary_name": "vim-tiny"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-athena"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-athena-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-common"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-gnome"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-gnome-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-gtk-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-gtk3-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-nox"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-nox-py2"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:7.4.1689-3ubuntu1.5+esm33",
"binary_name": "vim-tiny"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-athena"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-common"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-gnome"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-nox"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:8.0.1453-1ubuntu1.13+esm18",
"binary_name": "xxd"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}{
"binaries": [
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim-athena"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim-common"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim-gtk"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim-gtk3"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim-gui-common"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim-nox"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim-runtime"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "vim-tiny"
},
{
"binary_version": "2:8.1.2269-1ubuntu5.32+esm6",
"binary_name": "xxd"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}