The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8171-1 advisory.

    Nathan Mills discovered that Vim could crash when parsing certain regular expressions. An attacker could     possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu     25.10 (CVE-2026-32249)

    It was discovered that Vim did not properly sanitize user input. An attacker could possibly use this issue     to execute arbitrary commands. (CVE-2026-33412)

    Avishay Matayev discovered that Vim's modeline sandbox could be bypassed when opening a maliciously-     crafted file. An attacker could possibly use this issue to execute arbitrary commands. This issue only     affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.10. (CVE-2026-34982)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Vim vulnerabilities (USN-8171-1)

high Nessus Plugin ID 306258

Version 1.3

Version 1.2

Version 1.1

Version 1.3 May 1, 2026, 7:22 AM IAVM reference Plugin Feed: 202605010722
Version 1.2 Apr 14, 2026, 3:06 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604141506
Version 1.1 Apr 14, 2026, 9:52 AM New Plugin Feed: 202604140952