The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - vim: buffer overflow (CVE-2020-20703)

  - vim: use-after-free in skipwhite() in charset.c (CVE-2022-2345)

  - libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions,     leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.
    (CVE-2018-20786)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Detections

Analytics

RHEL 8 : vim (Unpatched Vulnerability)

critical Nessus Plugin ID 198465

Version 1.2

Version 1.1

Version 1.2 Oct 8, 2024, 5:16 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410080516
Version 1.1 Jun 4, 2024, 3:18 AM New Plugin Feed: 202406040318