Lucene search

K
mageiaGentoo FoundationMGASA-2015-0308
HistoryAug 10, 2015 - 5:31 p.m.

Updated ghostscript package fixes security vulnerability

2015-08-1017:31:41
Gentoo Foundation
advisories.mageia.org
13

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.3%

GhostScript is vulnerable to an integer overflow when processing a crafted PostScript file using the ps2pdf command (CVE-2015-3228).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchghostscript< 9.10-2.1ghostscript-9.10-2.1.mga4
Mageia5noarchghostscript< 9.14-3.1ghostscript-9.14-3.1.mga5

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.3%