PublicDateAtUSN: 2017-12-01 08:29:00 UTC
Candidate: CVE-2017-17087
PublicDate: 2017-12-01 08:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17087
 http://openwall.com/lists/oss-security/2017/11/27/2
 http://security.cucumberlinux.com/security/details.php?id=166
 https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJ
 https://ubuntu.com/security/notices/USN-4582-1
 https://ubuntu.com/security/notices/USN-5147-1
Description:
 fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file
 to the editor's primary group (which may be different from the group
 ownership of the original file), which allows local users to obtain
 sensitive information by leveraging an applicable group membership, as
 demonstrated by /etc/shadow owned by root:shadow mode 0640, but
 /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability
 than CVE-2017-1000382.
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to: sespiros
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N [5.5 MEDIUM]
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N [5.5 MEDIUM]


Patches_vim:
 upstream: https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8
upstream_vim: released (2:8.0.1401-1)
precise/esm_vim: ignored (end of ESM support, was needed)
trusty_vim: ignored (reached end-of-life)
trusty/esm_vim: released (2:7.4.052-1ubuntu3.1+esm4)
xenial_vim: released (2:7.4.1689-3ubuntu1.5)
esm-infra/xenial_vim: released (2:7.4.1689-3ubuntu1.5)
zesty_vim: ignored (reached end-of-life)
artful_vim: ignored (reached end-of-life)
bionic_vim: not-affected (2:8.0.1453-1ubuntu1)
cosmic_vim: not-affected (2:8.0.1453-1ubuntu1)
disco_vim: not-affected (2:8.0.1453-1ubuntu1)
eoan_vim: not-affected (2:8.0.1453-1ubuntu1)
focal_vim: not-affected (2:8.0.1453-1ubuntu1)
groovy_vim: not-affected (2:8.0.1453-1ubuntu1)
hirsute_vim: not-affected (2:8.0.1453-1ubuntu1)
impish_vim: not-affected (2:8.0.1453-1ubuntu1)
jammy_vim: not-affected (2:8.0.1453-1ubuntu1)
devel_vim: not-affected (2:8.0.1453-1ubuntu1)