There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in
    src/ccstruct/matrix.h reads matrix dimensions as signed int32_t values and compares them only with
    UINT16_MAX, allowing negative values to reach ResizeNoInit. Negative dimensions or a 65535 by 65535
    product can create inconsistent allocation state and later out-of-bounds accesses while loading a crafted
    traineddata file, causing denial of service. This issue is fixed in version 5.5.4. (CVE-2026-119340)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - Tesseract 是一個開源 OCR 引擎。在之前， 5.5.4src/ccstruct/matrix.h 中的 GENERIC_2D_ARRAY：:D eSerializeSize 會將矩陣維度讀取為帶正負號的int32_t值，並僅將它們與 UINT16_MAX 進行比較，從而允許負值達到 ResizeNoInit。負維度或 65535 x 65535 產品可能會在載入特製的訓練資料檔案時產生不一致的配置狀態，以及稍後的越界存取，進而造成拒絕服務。5.5.4 版已修正此問題。(CVE-2026-119340)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Tesseract 是一款开源 OCR 引擎。在之前 5.5.4，src/ccstruct/matrix.h 中的 GENERIC_2D_ARRAY：:D eSerializeSize 将矩阵维度读取为有符号的int32_t值，并仅与UINT16_MAX进行比较，从而允许负值到达 ResizeNoInit。负维度或 65535 x 65535 乘积可在加载特制的 traineddata 文件时造成不一致的分配状态和稍后的越界访问，从而造成拒绝服务。此问题已在 5.5.4 版本中修复。(CVE-2026-119340)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Tesseract は、オープンソースの OCR エンジンです。5.5.4以前は、src/ccstruct/matrix.h の GENERIC_2D_ARRAY::D eSerializeSize は、符号付きint32_t値としてマトリックス寸法を読み取り、それらを UINT16_MAX とのみ比較するため、負の値が ResizeNoInit に到達できるようにします。負の寸法または65535 x 65535の積は、細工されたtraineddataファイルを読み込む間に、一貫性のない割り当て状態を作り出し、後に領域外アクセスを作り出すことで、サービス拒否を引き起こす可能性があります。この問題はバージョン 5.5.4 で修正されています。(CVE-2026-119340)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793955849 advisory.

  - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of     GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and     size_used_ from a .traineddata model without a cap or an invariant check. reserve(reserved) allocates the     backing array, but the callback loop writes size_used_ elements. A crafted TESSDATA_INTTEMP component with     version_id 4 or later can therefore set reserved to a small value and size_used_ to a large value when     fontinfo_table_.read(fp, read_info) is called from src/classify/intproto.cpp, causing a heap out-of-bounds     write of FontInfo structures, heap corruption, a crash, or potentially controlled corruption. No fixed     release is available as of this review. (CVE-2026-88051)

  - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in     src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni_ and no_ against the     weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in src/lstm/weightmatrix.cpp     writes w.dim1() results into temp_line, which is sized from no_, and reads w.dim2() minus one inputs from     curr_input, which is sized from ni_. A crafted .traineddata NT_SOFTMAX layer can therefore use     inconsistent dimensions to cause a heap out-of-bounds write and read on the default LSTM engine, resulting     in heap corruption, a crash, information disclosure, or potentially controlled corruption. No fixed     release is available as of this review. (CVE-2026-88048)

  - Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in     src/ccstruct/matrix.h reads matrix dimensions as signed int32_t values and compares them only with     UINT16_MAX, allowing negative values to reach ResizeNoInit. Negative dimensions or a 65535 by 65535     product can create inconsistent allocation state and later out-of-bounds accesses while loading a crafted     traineddata file, causing denial of service. This issue is fixed in version 5.5.4. (CVE-2026-119340)

  - Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded     through Tesseract's deserializer can cause an unchecked signed integer multiplication in     Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count, undersizing     the forward-pass output buffer while writes use the unwrapped element count and causing a heap out-of-     bounds write during OCR recognition. This issue is fixed in version 5.5.3. (CVE-2026-73066)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in     src/ccstruct/matrix.h reads matrix dimensions as signed int32_t values and compares them only with     UINT16_MAX, allowing negative values to reach ResizeNoInit. Negative dimensions or a 65535 by 65535     product can create inconsistent allocation state and later out-of-bounds accesses while loading a crafted     traineddata file, causing denial of service. This issue is fixed in version 5.5.4. (CVE-2026-119340)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
478157	Echo: tesseract: security update to 5.5.0-1+e8	Tenable Cloud Security	Echo Local Security Checks	2026/11/1	2026/11/1	medium
478157	Echo: tesseract: security update to 5.5.0-1+e8	Tenable Self-Hosted Container Security	Echo Local Security Checks	2026/11/1	2026/11/1	medium
374427	Linux Distros 未修補弱點：CVE-2026-119340	Nessus	Misc.	2026/10/31	2026/11/6	medium
374427	Linux Distros 未修补的漏洞：CVE-2026-119340	Nessus	Misc.	2026/10/31	2026/11/6	medium
374427	Linux Distros のパッチ未適用の脆弱性: CVE-2026-119340	Nessus	Misc.	2026/10/31	2026/11/6	medium
377008	AlmaLinux 9.2 [TuxCare] Security Update: tesseract / tesseract-devel / tesseract-tools Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793955849)	Nessus	Alma Linux Local Security Checks	2026/11/6	2026/11/6	high
374427	Linux Distros Unpatched Vulnerability : CVE-2026-119340	Nessus	Misc.	2026/10/31	2026/11/6	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

high

medium