CVE-2018-20786
vim: libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to...
CVE-2018-20786 is fixed in 11 products on 1 platform, first by vim 2:8.0.1453-1ubuntu1.3, released December 29, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0292
87th percentile
libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| vim · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-athena · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-athena 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-common · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-common 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-gnome · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-gnome 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-gtk · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-gtk 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-gtk3 · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-gtk3 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-gui-common · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-gui-common 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-nox · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-nox 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-runtime · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-runtime 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| vim-tiny · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | vim-tiny 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |
| xxd · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.3 | xxd 2:8.0.1453-1ubuntu1.3 | Dec 29, 2019 |