SUSE-SU-2024:2627-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2024-29508: Fixed heap pointer leak in pdfbasefontalloc bsc1227380...

Fedora 39 : ghostscript (2024-52192927d8)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-52192927d8 advisory. Security fix for CVE-2024-33869 ---- Security fixes for CVE-2024-29509, CVE-2024-29508, CVE-2024-29507, CVE-2024-29506 Tenable has extracted the...

Fedora 40 : ghostscript (2024-053b8330a1)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-053b8330a1 advisory. Security fix for CVE-2024-33869 ---- Security fixes for CVE-2024-29509, CVE-2024-29508, CVE-2024-29507, CVE-2024-29506 Tenable has extracted the...

SUSE SLES12 Security Update : ghostscript (SUSE-SU-2024:2547-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2547-1 advisory. - CVE-2024-29508: Fixed heap pointer leak in pdfbasefontalloc bsc1227380 Tenable has extracted the preceding description block directly from...

SUSE: Security Advisory (SUSE-SU-2024:2547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Ghostscript vulnerabilities (USN-6897-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6897-1 advisory. It was discovered that Ghostscript incorrectly handled certain long PDF filter names. An attacker could possibly use this issue t...

BELL-CVE-2024-29508

Bulletin has no description...

CVE-2024-29508

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in the function pdfbasefontalloc...

CVE-2022-29508

Null pointer dereference in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29508

Null pointer dereference in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29508

Null pointer dereference in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29508

CVE-2022-29508 describes a null pointer dereference in the Intel VROC software prior to 7.7.6.1003 that may allow an authenticated local user to escalate privileges. The Red Hat/NVD/NIST and Intel advisory records confirm the issue is tied to the Intel VROC component and affects versions before t...

CVE-2023-29508

CVE-2023-29508 concerns XWiki Commons, where a stored XSS can be introduced via the Live Data macro if the last content author has script rights. The vulnerability affects XWiki Commons libraries used by multiple XWiki projects. The issue is mitigated by patches in XWiki releases: 14.10, 14.4.7, ...

CVE-2023-29508 org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Cross-site Scripting

XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can introduce a stored XSS by using the Live Data macro, if the last author of the content of the page has script rights. This has been patched in XWiki 14.10, 14.4.7, and 13.10.11...

CVE-2020-29508

creationtimestamp| type| source ---|---|--- 2022-07-12 00:19:29+00:00| seen| https://t.me/cibsecurity/45942...

CVE-2020-29508

CVE-2020-29508 affects Dell BSAFE Crypto-C Micro Edition (versions prior to 4.1.5) and Dell BSAFE Micro Edition Suite (versions prior to 4.6). The root cause is an Improper Input Validation vulnerability. Public references (CNVD/NVD/CVE records and Nessus-related entries) confirm the affected pro...

CVE-2021-29508

CVE-2021-29508 affects Wire and its fork, due to insecure handling of type information in its serialization format. The vulnerability allows a deserializer to be influenced by a malicious payload, potentially enabling the creation of any type on the receiving end. Public descriptions across Red H...