USN-4016-2: Neovim vulnerability
It was discovered that Neovim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-12735)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/neovimto a version that resolves this vulnerability.Fixed in 0.3.4-1ubuntu0.19.04.1 - Upgrade
Upgrade
ubuntu/neovim-runtimeto a version that resolves this vulnerability.Fixed in 0.3.4-1ubuntu0.19.04.1 - Upgrade
Upgrade
ubuntu/neovimto a version that resolves this vulnerability.Fixed in 0.3.1-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/neovim-runtimeto a version that resolves this vulnerability.Fixed in 0.3.1-1ubuntu0.1
Event History
Frequently Asked Questions
What is the severity of USN-4016-2?
USN-4016-2 is considered a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix USN-4016-2?
To fix USN-4016-2, users should update to the latest versions of neovim and neovim-runtime as specified in the advisory.
What versions of Ubuntu are affected by USN-4016-2?
Ubuntu 19.04 and 18.10 are affected by USN-4016-2 if they are running specific vulnerable versions of neovim.
What is the CVE associated with USN-4016-2?
The CVE associated with USN-4016-2 is CVE-2019-12735.
Can I exploit USN-4016-2 remotely?
Yes, USN-4016-2 can potentially be exploited remotely by an attacker using malicious file handling.