Linux Distros 未修補弱點:CVE-2026-88052

high Nessus Plugin ID 344687

概要

Linux/Unix 主機上安裝的一個或多個套件存有弱點,廠商表示將不會修補。

說明

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件,且廠商未提供可用的修補程式。

- Tesseract 是一個開源 OCR 引擎。在版本和更早版本中 5.5.3 ,src/ccutil/unicharset.cpp 中的 UNICHARSET::load_via_fgets 會信任宣告的 unichar 計數為迴圈綁定,並使用 id 作為 unichars 向量的未檢查索引。 unichar_insert_backwards_compatible可以針對空白、重複或已編碼的表示法保持向量不變,導致 id 變得大於 unichars.size()。
在預設 LSTM 和舊版引擎中初始化期間,後續的 set_* 呼叫和對 unichars[id].properties.enabled 的寫入超出向量的寫入UNICHAR_PROPERTIES,從而導致堆積損毀、損毀或可能受控損毀。截至本次審查時,沒有可用的固定版本。(CVE-2026-88052)

請注意,Nessus 的判定取決於廠商所報告的套件是否存在。

解決方案

目前尚未有已知的解決方案。

另請參閱

https://access.redhat.com/security/cve/cve-2026-88052

https://security-tracker.debian.org/tracker/CVE-2026-88052

https://ubuntu.com/security/CVE-2026-88052

Plugin 詳細資訊

嚴重性: High

ID: 344687

檔案名稱: unpatched_CVE_2026_88052.nasl

版本: 1.4

類型: Local

代理程式: unix

系列: Misc.

已發布: 2026/9/11

已更新: 2026/9/17

支援的感應器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

風險資訊

VPR

風險因素: Medium

分數: 4.9

百分位數: 58.22

CVSS v2

風險因素: High

基本分數: 7.2

時間性分數: 6.5

媒介: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS 評分資料來源: CVE-2026-88052

CVSS v3

風險因素: High

基本分數: 7.8

時間性分數: 7.4

媒介: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

時間媒介: CVSS:3.0/E:P/RL:U/RC:C

弱點資訊

CPE: cpe:/o:canonical:ubuntu_linux:14.04:-:lts, cpe:/o:canonical:ubuntu_linux:16.04:-:lts, cpe:/o:canonical:ubuntu_linux:18.04:-:lts, cpe:/o:canonical:ubuntu_linux:20.04:-:lts, cpe:/o:canonical:ubuntu_linux:22.04:-:lts, cpe:/o:canonical:ubuntu_linux:24.04:-:lts, cpe:/o:canonical:ubuntu_linux:26.04:-:lts, cpe:/o:centos:centos:8, cpe:/o:debian:debian_linux:12.0, cpe:/o:debian:debian_linux:13.0, cpe:/o:debian:debian_linux:14.0, cpe:/o:redhat:enterprise_linux:10, cpe:/o:redhat:enterprise_linux:8, cpe:/o:redhat:enterprise_linux:9, p-cpe:/a:canonical:ubuntu_linux:tesseract, p-cpe:/a:centos:centos:tesseract-devel, p-cpe:/a:centos:centos:tesseract-langpack-afr, p-cpe:/a:centos:centos:tesseract-langpack-amh, p-cpe:/a:centos:centos:tesseract-langpack-ara, p-cpe:/a:centos:centos:tesseract-langpack-asm, p-cpe:/a:centos:centos:tesseract-langpack-aze, p-cpe:/a:centos:centos:tesseract-langpack-aze_cyrl, p-cpe:/a:centos:centos:tesseract-langpack-bel, p-cpe:/a:centos:centos:tesseract-langpack-ben, p-cpe:/a:centos:centos:tesseract-langpack-bod, p-cpe:/a:centos:centos:tesseract-langpack-bos, p-cpe:/a:centos:centos:tesseract-langpack-bul, p-cpe:/a:centos:centos:tesseract-langpack-cat, p-cpe:/a:centos:centos:tesseract-langpack-ceb, p-cpe:/a:centos:centos:tesseract-langpack-ces, p-cpe:/a:centos:centos:tesseract-langpack-chi_sim, p-cpe:/a:centos:centos:tesseract-langpack-chi_tra, p-cpe:/a:centos:centos:tesseract-langpack-chr, p-cpe:/a:centos:centos:tesseract-langpack-cym, p-cpe:/a:centos:centos:tesseract-langpack-dan, p-cpe:/a:centos:centos:tesseract-langpack-deu, p-cpe:/a:centos:centos:tesseract-langpack-dzo, p-cpe:/a:centos:centos:tesseract-langpack-ell, p-cpe:/a:centos:centos:tesseract-langpack-enm, p-cpe:/a:centos:centos:tesseract-langpack-epo, p-cpe:/a:centos:centos:tesseract-langpack-est, p-cpe:/a:centos:centos:tesseract-langpack-eus, p-cpe:/a:centos:centos:tesseract-langpack-fas, p-cpe:/a:centos:centos:tesseract-langpack-fin, p-cpe:/a:centos:centos:tesseract-langpack-fra, p-cpe:/a:centos:centos:tesseract-langpack-frk, p-cpe:/a:centos:centos:tesseract-langpack-frm, p-cpe:/a:centos:centos:tesseract-langpack-gle, p-cpe:/a:centos:centos:tesseract-langpack-glg, p-cpe:/a:centos:centos:tesseract-langpack-grc, p-cpe:/a:centos:centos:tesseract-langpack-guj, p-cpe:/a:centos:centos:tesseract-langpack-hat, p-cpe:/a:centos:centos:tesseract-langpack-heb, p-cpe:/a:centos:centos:tesseract-langpack-hin, p-cpe:/a:centos:centos:tesseract-langpack-hrv, p-cpe:/a:centos:centos:tesseract-langpack-hun, p-cpe:/a:centos:centos:tesseract-langpack-iku, p-cpe:/a:centos:centos:tesseract-langpack-ind, p-cpe:/a:centos:centos:tesseract-langpack-isl, p-cpe:/a:centos:centos:tesseract-langpack-ita, p-cpe:/a:centos:centos:tesseract-langpack-ita_old, p-cpe:/a:centos:centos:tesseract-langpack-jav, p-cpe:/a:centos:centos:tesseract-langpack-jpn, p-cpe:/a:centos:centos:tesseract-langpack-kan, p-cpe:/a:centos:centos:tesseract-langpack-kat, p-cpe:/a:centos:centos:tesseract-langpack-kat_old, p-cpe:/a:centos:centos:tesseract-langpack-kaz, p-cpe:/a:centos:centos:tesseract-langpack-khm, p-cpe:/a:centos:centos:tesseract-langpack-kir, p-cpe:/a:centos:centos:tesseract-langpack-kor, p-cpe:/a:centos:centos:tesseract-langpack-lao, p-cpe:/a:centos:centos:tesseract-langpack-lat, p-cpe:/a:centos:centos:tesseract-langpack-lav, p-cpe:/a:centos:centos:tesseract-langpack-lit, p-cpe:/a:centos:centos:tesseract-langpack-mal, p-cpe:/a:centos:centos:tesseract-langpack-mar, p-cpe:/a:centos:centos:tesseract-langpack-mkd, p-cpe:/a:centos:centos:tesseract-langpack-mlt, p-cpe:/a:centos:centos:tesseract-langpack-msa, p-cpe:/a:centos:centos:tesseract-langpack-mya, p-cpe:/a:centos:centos:tesseract-langpack-nep, p-cpe:/a:centos:centos:tesseract-langpack-nld, p-cpe:/a:centos:centos:tesseract-langpack-nor, p-cpe:/a:centos:centos:tesseract-langpack-ori, p-cpe:/a:centos:centos:tesseract-langpack-pan, p-cpe:/a:centos:centos:tesseract-langpack-pol, p-cpe:/a:centos:centos:tesseract-langpack-por, p-cpe:/a:centos:centos:tesseract-langpack-pus, p-cpe:/a:centos:centos:tesseract-langpack-ron, p-cpe:/a:centos:centos:tesseract-langpack-rus, p-cpe:/a:centos:centos:tesseract-langpack-san, p-cpe:/a:centos:centos:tesseract-langpack-sin, p-cpe:/a:centos:centos:tesseract-langpack-slk, p-cpe:/a:centos:centos:tesseract-langpack-slv, p-cpe:/a:centos:centos:tesseract-langpack-spa, p-cpe:/a:centos:centos:tesseract-langpack-spa_old, p-cpe:/a:centos:centos:tesseract-langpack-sqi, p-cpe:/a:centos:centos:tesseract-langpack-srp, p-cpe:/a:centos:centos:tesseract-langpack-srp_latn, p-cpe:/a:centos:centos:tesseract-langpack-swa, p-cpe:/a:centos:centos:tesseract-langpack-swe, p-cpe:/a:centos:centos:tesseract-langpack-syr, p-cpe:/a:centos:centos:tesseract-langpack-tam, p-cpe:/a:centos:centos:tesseract-langpack-tel, p-cpe:/a:centos:centos:tesseract-langpack-tgk, p-cpe:/a:centos:centos:tesseract-langpack-tha, p-cpe:/a:centos:centos:tesseract-langpack-tir, p-cpe:/a:centos:centos:tesseract-langpack-tur, p-cpe:/a:centos:centos:tesseract-langpack-uig, p-cpe:/a:centos:centos:tesseract-langpack-ukr, p-cpe:/a:centos:centos:tesseract-langpack-urd, p-cpe:/a:centos:centos:tesseract-langpack-uzb, p-cpe:/a:centos:centos:tesseract-langpack-uzb_cyrl, p-cpe:/a:centos:centos:tesseract-langpack-vie, p-cpe:/a:centos:centos:tesseract-langpack-yid, p-cpe:/a:centos:centos:tesseract-osd, p-cpe:/a:centos:centos:tesseract, p-cpe:/a:debian:debian_linux:tesseract, p-cpe:/a:redhat:enterprise_linux:tesseract-devel, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-afr, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-amh, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ara, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-asm, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-aze, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-aze_cyrl, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-bel, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ben, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-bod, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-bos, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-bul, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-cat, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ceb, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ces, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-chi_sim, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-chi_tra, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-chr, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-cym, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-dan, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-deu, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-dzo, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ell, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-enm, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-epo, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-est, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-eus, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-fas, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-fin, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-fra, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-frk, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-frm, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-gle, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-glg, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-grc, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-guj, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-hat, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-heb, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-hin, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-hrv, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-hun, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-iku, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ind, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-isl, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ita, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ita_old, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-jav, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-jpn, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-kan, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-kat, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-kat_old, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-kaz, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-khm, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-kir, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-kor, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-lao, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-lat, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-lav, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-lit, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-mal, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-mar, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-mkd, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-mlt, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-msa, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-mya, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-nep, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-nld, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-nor, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ori, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-pan, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-pol, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-por, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-pus, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ron, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-rus, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-san, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-sin, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-slk, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-slv, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-spa, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-spa_old, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-sqi, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-srp, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-srp_latn, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-swa, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-swe, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-syr, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-tam, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-tel, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-tgk, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-tha, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-tir, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-tur, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-uig, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-ukr, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-urd, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-uzb, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-uzb_cyrl, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-vie, p-cpe:/a:redhat:enterprise_linux:tesseract-langpack-yid, p-cpe:/a:redhat:enterprise_linux:tesseract-osd, p-cpe:/a:redhat:enterprise_linux:tesseract

必要的 KB 項目: Host/local_checks_enabled, Host/cpu, global_settings/vendor_unpatched, Host/OS/identifier

可被惡意程式利用: true

可輕鬆利用: Exploits are available

弱點發布日期: 2026/9/10

參考資訊

CVE: CVE-2026-88052