In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

遠端 Ubuntu 20.04 LTS/22.04 LTS/23.04 主機上安裝的套件受到 USN-6517-1 公告中所提及的多個弱點影響。

  - 在 Perl 5.34.0 中，sv.c 的 S_find_uninit_var 函式的堆疊出現會造成當機的弱點，可能會導致遠端執行程式碼或本機權限提升。(CVE-2022-48522)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Ubuntu 20.04 LTS / 22.04 LTS / 23.04 主机上安装的程序包受到 USN-6517-1 公告中提及的多个漏洞的影响。

  - 在 Perl 5.34.0 中，sv.c 中的函数 S_find_uninit_var 存在基于堆栈的崩溃，可能导致远程代码执行或本地特权提升。(CVE-2022-48522)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

リモートの Ubuntu 20.04 LTS / 22.04 LTS / 23.04 ホストには、USN-6517-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - Perl 5.34.0 では、sv.c の S_find_uninit_var 関数にスタックベースのクラッシュがあり、リモートコードの実行やローカルの権限昇格を引き起こす可能性があります。(CVE-2022-48522)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code     execution or local privilege escalation. (CVE-2022-48522)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6517-1 advisory.

    It was discovered that Perl incorrectly handled printing certain warning messages. An attacker could     possibly use this issue to cause Perl to consume resources, leading to a denial of service. This issue     only affected Ubuntu 22.04 LTS. (CVE-2022-48522)

    Nathan Mills discovered that Perl incorrectly handled certain regular expressions. An attacker could use     this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2023-47038)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code     execution or local privilege escalation. (CVE-2022-48522)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
504231	Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2022-48522)	Tenable OT Security	Tenable.ot	2025/11/13	2026/3/5	critical
186300	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10：Perl 弱點 (USN-6517-1)	Nessus	Ubuntu Local Security Checks	2023/11/27	2025/9/3	critical
186300	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10：Perl 漏洞 (USN-6517-1)	Nessus	Ubuntu Local Security Checks	2023/11/27	2025/9/3	critical
186300	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Perl の脆弱性 (USN-6517-1)	Nessus	Ubuntu Local Security Checks	2023/11/27	2025/9/3	critical
188569	EulerOS Virtualization 2.11.0 : perl (EulerOS-SA-2023-3383)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	critical
186300	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Perl vulnerabilities (USN-6517-1)	Nessus	Ubuntu Local Security Checks	2023/11/27	2025/9/3	critical
188314	EulerOS 2.0 SP11 : perl (EulerOS-SA-2023-3040)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	critical
188639	EulerOS 2.0 SP11 : perl (EulerOS-SA-2023-3017)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	critical
188480	EulerOS Virtualization 2.11.1 : perl (EulerOS-SA-2023-3365)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical