In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).
{ "vanir_signatures": [ { "id": "CVE-2019-20807-17ab1ca8", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Function", "target": { "file": "src/evalfunc.c", "function": "f_pyxeval" }, "signature_version": "v1", "digest": { "function_hash": "184130113731174592183344161800413174107", "length": 307.0 } }, { "id": "CVE-2019-20807-19b84298", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Function", "target": { "file": "src/evalfunc.c", "function": "f_py3eval" }, "signature_version": "v1", "digest": { "function_hash": "187371314401695224819360221639048846513", "length": 197.0 } }, { "id": "CVE-2019-20807-4cfc0307", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Line", "target": { "file": "src/evalfunc.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "9080343361829260520971137938195072900", "106042209952997796840899028662232101515", "304836589597102166411351263947518119322", "71026328123205413090070822253411220662", "116000159262457596022944079085790974734", "12524768265974968815066832710808915111", "258308727018778827919021356983145126373", "116000159262457596022944079085790974734", "48034795266817749779326915783309043636", "208647443185339919365708416704797707288", "96450218680459444622661979416557747892", "48262851359454685621365020146588500630", "303398165558118533568912213293842028335", "96450218680459444622661979416557747892", "319726743473062238495792116600376566100", "181817888830744303769858591221236535746", "312571904400349605786577834339539939315", "89260055697134584644239477777500973682", "46877655679414180970442145271007410717", "249157992283471079262165001855181515162", "165894333088028759138026658230932818851", "154729555646592018515911004664056954016", "39243042904416227182282068340406996365", "190700653982227759149960883522389675223", "229034568656184302343473178027514620949", "93619720859634513692841745690833547920", "171100187566483446584777205304889323861", "121970686064115557009417115526905445029", "45110903031826957482257216637521307255", "180571134028201081397474266051378097504", "204670244304176714111538341405553008240", "162398452172501510309086737087825094044" ], "threshold": 0.9 } }, { "id": "CVE-2019-20807-4f73b5de", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Line", "target": { "file": "src/ex_cmds.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "333827169890607588091630955887544014601", "294014202066586698942868729393161839417", "159810873078533562544154211402212070290", "53311882653266312664149888289974714972" ], "threshold": 0.9 } }, { "id": "CVE-2019-20807-7a6e5d04", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Function", "target": { "file": "src/evalfunc.c", "function": "f_settabvar" }, "signature_version": "v1", "digest": { "function_hash": "98529159721548410210698050833299899110", "length": 673.0 } }, { "id": "CVE-2019-20807-9f20335b", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Function", "target": { "file": "src/ex_cmds.c", "function": "check_restricted" }, "signature_version": "v1", "digest": { "function_hash": "327025616794677725615367981023182467748", "length": 150.0 } }, { "id": "CVE-2019-20807-aed25c53", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Function", "target": { "file": "src/evalfunc.c", "function": "f_writefile" }, "signature_version": "v1", "digest": { "function_hash": "62726684447263577545467327825281159859", "length": 1750.0 } }, { "id": "CVE-2019-20807-b5ae62b8", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Function", "target": { "file": "src/evalfunc.c", "function": "f_pyeval" }, "signature_version": "v1", "digest": { "function_hash": "262091683188958663334764613222945854824", "length": 197.0 } }, { "id": "CVE-2019-20807-ba67cbad", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Line", "target": { "file": "src/version.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "146200493773228420153804765641940418619", "330181963505026474875079939931077045170", "208653747698239218921973381116690908028", "223716774409976112041010148398574403018" ], "threshold": 0.9 } }, { "id": "CVE-2019-20807-fd0725a9", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Line", "target": { "file": "src/ex_docmd.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "234923997843297838271399130606587766018", "29771070190634396179139548123799042397", "163516767509762382095997169800590896073", "112893288628765956434322924483877010173", "68780107761809981441330735091547751949", "337176725719248667021570232244345783572", "167080820117920634780806443480600674692" ], "threshold": 0.9 } }, { "id": "CVE-2019-20807-ff6dd44b", "source": "https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075", "deprecated": false, "signature_type": "Function", "target": { "file": "src/evalfunc.c", "function": "f_luaeval" }, "signature_version": "v1", "digest": { "function_hash": "72587713356356416042582268604158149412", "length": 179.0 } } ] }