REDHAT-BUG-2450907: Command Injection
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Vimto a version that resolves this vulnerability.Fixed in 9.2.0202 - Configuration
Because the glob() command injection depends on Vim's user's 'shell' setting, review the user's Vim 'shell' configuration and set it to a trusted/expected shell environment before using glob() (exact mitigation parameters not specified in the provided text).
Vim shell = (not specified)
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2450907?
The severity of REDHAT-BUG-2450907 is high due to the potential for arbitrary code execution.
How do I fix REDHAT-BUG-2450907?
To fix REDHAT-BUG-2450907, you should update Vim to version 9.2.0202 or later.
What systems are affected by REDHAT-BUG-2450907?
REDHAT-BUG-2450907 affects Unix-like systems running Vim versions prior to 9.2.0202.
What specific vulnerability is associated with REDHAT-BUG-2450907?
REDHAT-BUG-2450907 is associated with a command injection vulnerability in Vim's glob() function.
Can REDHAT-BUG-2450907 be exploited remotely?
Yes, if an attacker can craft input patterns containing newline characters, REDHAT-BUG-2450907 can potentially be exploited remotely.