REDHAT-BUG-2492972: High severity vim Vim vulnerability
Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Vimto a version that resolves this vulnerability.Fixed in 9.2.0699
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2492972?
The severity of REDHAT-BUG-2492972 is classified as high with a score of 7.
How do I fix REDHAT-BUG-2492972?
To fix REDHAT-BUG-2492972, update Vim to version 9.2.0699 or later.
What is the impact of REDHAT-BUG-2492972?
The impact of REDHAT-BUG-2492972 is that it allows execution of arbitrary code via the Python omni-completion feature.
Which versions of Vim are affected by REDHAT-BUG-2492972?
Versions of Vim prior to 9.2.0699 are affected by REDHAT-BUG-2492972.
Is the vulnerability in REDHAT-BUG-2492972 related to Python?
Yes, REDHAT-BUG-2492972 involves Vim's Python omni-completion feature which is susceptible to executing arbitrary code.