Test ID:	1.3.6.1.4.1.25623.1.0.844372
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4309-1)
Summary:	The remote host is missing an update for the 'vim' package(s) announced via the USN-4309-1 advisory.
Description:	Summary: The remote host is missing an update for the 'vim' package(s) announced via the USN-4309-1 advisory. Vulnerability Insight: It was discovered that Vim incorrectly handled certain sources. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS (CVE-2017-11109) It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. (CVE-2017-5953) It was discovered that Vim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.06 LTS. (CVE-2018-20786) It was discovered that Vim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 19.10. (CVE-2019-20079) It was discovered that Vim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS. (CVE-2017-6349, CVE-2017-6350) Affected Software/OS: 'vim' package(s) on Ubuntu 12.04, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 19.10. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11109 https://bugzilla.redhat.com/show_bug.cgi?id=1468492 https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html https://usn.ubuntu.com/4309-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-5953 BugTraq ID: 96217 http://www.securityfocus.com/bid/96217 Debian Security Information: DSA-3786 (Google Search) http://www.debian.org/security/2017/dsa-3786 https://security.gentoo.org/glsa/201706-26 https://usn.ubuntu.com/4016-1/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6349 BugTraq ID: 96451 http://www.securityfocus.com/bid/96451 https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c https://groups.google.com/forum/#!topic/vim_dev/LAgsTcdSfNA https://groups.google.com/forum/#!topic/vim_dev/QPZc0CY9j3Y http://www.securitytracker.com/id/1037949 Common Vulnerability Exposure (CVE) ID: CVE-2017-6350 BugTraq ID: 96448 http://www.securityfocus.com/bid/96448 https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75 https://groups.google.com/forum/#!topic/vim_dev/L_dOHOOiQ5Q Common Vulnerability Exposure (CVE) ID: CVE-2018-20786 https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8 https://github.com/vim/vim/issues/3711 Common Vulnerability Exposure (CVE) ID: CVE-2019-20079 https://github.com/vim/vim/commit/ec66c41d84e574baf8009dbc0bd088d2bc5b2421 https://github.com/vim/vim/compare/v8.1.2135...v8.1.2136 https://packetstormsecurity.com/files/154898
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.