92 matches found
Advisory ROSA-SA-2023-2085
Software: xrdp 0.9.21 OS: rosa-server79 packageevrstring: xrdp-0.9.21 CVE-ID: CVE-2022-23477 BDU-ID: 2022-07224 CVE-Crit: CRITICAL CVE-DESC: A vulnerability in the audinsendopen function of the xrdp server is related to the possibility of a stacked buffer overflow. Exploitation of the vulnerabili...
Amazon Linux 2022 : ghostscript (ALAS2022-2022-230)
The version of ghostscript installed on the remote host is prior to 9.56.1-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-230 advisory. - A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of...
GLSA-202211-11 : GPL Ghostscript: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202211-11 GPL Ghostscript: Multiple Vulnerabilities - A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a special...
Ubuntu: Security Advisory (USN-5643-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5643-1 ghostscript vulnerabilities
It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to cause GhostScript to crash, resulting in a denial of service, or possibly execute arbitrary cod...
CVE-2022-33183. Stack buffer overflow using in “firmwaredownload†and “diagshow†commands.
Security Advisory ID : BSA-2022-2085 Component : FOS Revision : 1.1 A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload†and...
OESA-2022-1754 ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large...
CVE-2022-2085
creationtimestamp| type| source ---|---|--- 2022-06-16 22:20:44+00:00| seen| https://t.me/cibsecurity/44668...
CVE-2022-2085
CVE-2022-2085 is a NULL pointer dereference in Ghostscript triggered when rendering a large number of bits; for bpp > 64, mem_x_device is used and init_device_procs is missing, causing crashes. The issue affects various Ghostscript deployments (e.g., Artifex Ghostscript and GPL Ghostscript) an...
CVE-2022-2085
A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...
Mageia: Security Advisory (MGASA-2016-0225)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2016-0233)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2085
creationtimestamp| type| source ---|---|--- 2021-01-20 18:43:35+00:00| seen| https://t.me/cibsecurity/22417...
CVE-2021-2085
CVE-2021-2085 affects Oracle E-Business Suite, Oracle CRM Technical Foundation component (Preferences). Affected versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation, with human inte...
CVE-2020-2085
This CVE-2020-2085 entry is rejected and not an active vulnerability entry per the description.
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2020-2085)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2085
Summary: CVE-2019-2085 is an out-of-bounds write in libxaac on Android 10 due to a missing bounds check, enabling remote code execution with user interaction required. The issue is tied to the Android 10 libxaac/Android-10 stack, with a high impact and network attack vector per CVE details. Affec...