critical
CVE-2020-20703
vim: buffer overflow
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Amazon (medium), Ubuntu (medium), Red Hat (low).
Description
Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | vim-common, vim-data, vim-debuginfo and 3 more | 2:8.2.4006-1.1.amzn1 |
| amazon linux 2 | vim-X11, vim-common, vim-debuginfo and 3 more | 2:8.2.3642-1.amzn2.0.1 |
| debian 11 | vim | 2:8.1.2136-1 |
| debian 12 | vim | 2:8.1.2136-1 |
| debian 13 | vim | 2:8.1.2136-1 |
| debian 14 | vim | 2:8.1.2136-1 |
| echo | vim | 2:8.1.2136-1 |
| Red Hat | vim, vim-X11, vim-common and 3 more | no fix listed |
| root.io debian 12 | rootio-vim | 2:8.1.2136-1 |
| ubuntu 18.04-ESM | vim | 2:8.0.1453-1ubuntu1.3 |
Show all 25 entries from 10 sources
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | vim-common | 2:8.2.4006-1.1.amzn1 |
| amazon linux 1 | vim-data | 2:8.2.4006-1.1.amzn1 |
| amazon linux 1 | vim-debuginfo | 2:8.2.4006-1.1.amzn1 |
| amazon linux 1 | vim-enhanced | 2:8.2.4006-1.1.amzn1 |
| amazon linux 1 | vim-filesystem | 2:8.2.4006-1.1.amzn1 |
| amazon linux 1 | vim-minimal | 2:8.2.4006-1.1.amzn1 |
| amazon linux 2 | vim-X11 | 2:8.2.3642-1.amzn2.0.1 |
| amazon linux 2 | vim-common | 2:8.2.3642-1.amzn2.0.1 |
| amazon linux 2 | vim-debuginfo | 2:8.2.3642-1.amzn2.0.1 |
| amazon linux 2 | vim-enhanced | 2:8.2.3642-1.amzn2.0.1 |
| amazon linux 2 | vim-filesystem | 2:8.2.3642-1.amzn2.0.1 |
| amazon linux 2 | vim-minimal | 2:8.2.3642-1.amzn2.0.1 |
| debian 11 | vim | 2:8.1.2136-1 |
| debian 12 | vim | 2:8.1.2136-1 |
| debian 13 | vim | 2:8.1.2136-1 |
| debian 14 | vim | 2:8.1.2136-1 |
| echo | vim | 2:8.1.2136-1 |
| Red Hat | vim | no fix listed |
| Red Hat | vim-X11 | no fix listed |
| Red Hat | vim-common | no fix listed |
| Red Hat | vim-enhanced | no fix listed |
| Red Hat | vim-filesystem | no fix listed |
| Red Hat | vim-minimal | no fix listed |
| root.io debian 12 | rootio-vim | 2:8.1.2136-1 |
| ubuntu 18.04-ESM | vim | 2:8.0.1453-1ubuntu1.3 |