Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer ACPICA commit 770653e3ba67c30a629ca7d12e352d83c2541b1e Before this change we see the following UBSAN stack trace in Fuchsia: #0 0x000021e4213b3302 in acpi_ds_init_aml_walk(struct acpi_walk_state*, union acpi_parse_object*, struct acpi_namespace_node*, u8*, u32, struct acpi_evalulate_info*, u8) ../../ third_party/acpica/source/components/dispatcher/dswstate.c: <platform-bus-x86.so>682  +0x233302 #1.2 ubsan_get_stack_trace() compiler-rt/lib/ubsan/ubsan_diag 中的 0x000020d0f660777f .cpp:41 <libclang_rt.asan.so>+0x3d77f #1.1 mighty_print_stack_trace() compiler-rt/lib/ubsan/ubsan_diag.cpp:51 中的 0x000020d0f660777f <libclang_rt.asan.so>+0x3d77f #1 ~scoped_report() compiler-rt/lib/ubsan/ubsan_diag 中的 0x000020d0f660777f .cpp:387 <libclang_rt.asan.so>+0x3d77f #2 handlepointer_overflow_impl() compiler-rt/lib/ubsan/ubsan_handlers.cpp:809 中的 0x000020d0f660b96d <libclang_rt.asan.so>+0x4196d #3 compiler-rt/lib/ubsan/ubsan_handlers.cpp:815 中的 0x000020d0f660b50d <libclang_rt.asan.so>+0x4150d #4 0x000021e4213b3302 in acpi_ds_init_aml_walk(struct acpi_walk_state*、union acpi_parse_object*、struct acpi_namespace_node*、u8*、u32、struct acpi_evalulate_info*、u8) ../../ third_party/acpica/source/components/dispatcher/dswstate.c <platform-bus-x86.so>:682  +0x233302 #5 0x000021e4213e2369 in acpi_ds_call_control_method(struct acpi_thread_state*, struct acpi_walk_state*, union acpi_parse_object*) ../../ third_party/acpica/source/components/ <platform-bus-x86.so>dispatcher/dsmethod.c:605  +0x262369 #6 0x000021e421437fac in acpi_ps_parse_aml(struct acpi_walk_state*) ../../ third_party/acpica/source/components/parser/psparse.c:550 <platform-bus-x86.so>+0x2b7fac #7 acpi_ps_execute_method(struct acpi_evalulate_info*) ../../acpica/source/components/parser 中的 0x000021e4214464d2 /psxface.c:244 <platform-bus-x86.so>+0x2c64d2 #8 acpi_ns_evaluate(struct acpi_evalulate_info*) 中的 0x000021e4213aa052../../ third_party/acpica/source/components/namespace/nseval.c: <platform-bus-x86.so>250  +0x22a052 #9 acpi_ns_init_3dddevice8 中的 acpi_ns_init_ (acpi_handle, u32, void*, void**) ../../ third_party/acpica/source/components/namespace/nsinit.c :735 <platform-bus-x86.so>+0x293dd8 #10 acpi_ns_walk_namespace(acpi_object_type, acpi_handle, u32, u32, acpi_walk_callback, acpi_walk_callback, void*, void**) 中的 0x000021e421429e98 ../../ third_party/acpica/source/components/namespace/nswalk.c :298 <platform-bus-x86.so>+0x2a9e98 #11 acpi_ns_initialize_devices(u32) 中的 0x000021e4214131ac ../../ third_party/acpica/source/components/namespace/ <platform-bus-x86.so>nsinit.c:268  +0x2931ac #12 0x000021e42147c40d(upi_initialize_objects 中的 。 ../ third_party/acpica/source/components/utilities/utxfinit.c:304 <platform-bus-x86.so>+0x2fc40d #13 acpi::acpi_impl::initialize_acpi(acpi::acpi_impl*) ../../src/devices/ 中的 0x000021e42126d603 board/lib/acpi/acpi-impl.cc:224 <platform-bus-x86.so>+0xed603 新增簡單的檢查可避免指標增加零但其他方面的運作如前。請注意我們的研究發現是針對 ACPICA 20221020但主機上存在相同的程式碼。 (CVE-2023-53182)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2023-53182

medium Nessus Plugin ID 264979

版本 1.8