6525 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-8602
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute...
Linux Distros Unpatched Vulnerability : CVE-2019-25059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839. CVE-2019-25059 Note that Ness...
Linux Distros Unpatched Vulnerability : CVE-2020-14373
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use after free was found in igcrelocstructptr of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial o...
Linux Distros Unpatched Vulnerability : CVE-2017-8291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a /OutputFile %pipe% substring in a...
Linux Distros Unpatched Vulnerability : CVE-2020-16295
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference vulnerability in cljmediasize in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial o...
Linux Distros Unpatched Vulnerability : CVE-2020-16309
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability in lxm5700mprintpage in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of...
Linux Distros Unpatched Vulnerability : CVE-2016-10220
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gsmakewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL point...
Linux Distros Unpatched Vulnerability : CVE-2010-4054
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gstype2interpret function in Ghostscript allows remote attackers to cause a denial of service incorrect pointer dereference and application crash via crafte...
Advisory ROSA-SA-2025-2736
Software: ghostscript 9.27 OS: ROSA Virtualization 3.0 packageevrstring: ghostscript-9.27-13.0.1.rv30 CVE-ID: CVE-2024-33871 BDU-ID: 2024-05064 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability exists in the contrib/opvp/gdevopvp.c component of the Ghostscript processing, conversion, and document...
Advisory ROSA-SA-2025-2723
Software: ghostscript 9.27 OS: ROSA Virtualization 3.0 packageevrstring: ghostscript-9.27-15.0.2.rv30 CVE-ID: CVE-2024-46951 BDU-ID: 2024-09419 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the psi/zcolor.c component of the Ghostscript document processing, conversion, and generation software suite...
PT-2025-9098 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurs due to an unknown read issue. The crash involves the chunk obj alloc and pdfi read cff dict functions. Recommendations: At the moment, there is no information about a newer...
PT-2025-9100 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurs due to a segmentation fault on an unknown address. The crash involves the chunk free object, pdfi free dict, and pdfi free font cff functions. Recommendations: At the moment,...
PT-2025-9728 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A heap-use-after-free READ 4 crash type issue has been identified. The crash state involves gc trace, gs gc reclaim, and ireclaim. Recommendations: At the moment, there is no information abo...
ghostscript:gs_device_faxg3_fuzzer: Segv on unknown address in chunk_free_object
Detailed Report: https://oss-fuzz.com/testcase?key=6509774749630464 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicefaxg3fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: chunkfreeobject pdfifreedict...
ghostscript:gstoraster_pdf_fuzzer: Crash in insert_free
Detailed Report: https://oss-fuzz.com/testcase?key=5793225357197312 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpdffuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000f4248 Crash State: insertfree chunkobjalloc...
ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in gc_trace
Detailed Report: https://oss-fuzz.com/testcase?key=5789252277567488 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x5310000b0808 Crash State: gctrace...
ghostscript:gs_device_faxg3_fuzzer: Crash in chunk_obj_alloc
Detailed Report: https://oss-fuzz.com/testcase?key=5746085004115968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicefaxg3fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000f4248 Crash State: chunkobjalloc pdfireadcffdi...
Amazon Linux 2023 : ghostscript, ghostscript-gtk, ghostscript-tools-dvipdf (ALAS2023-2025-856)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-856 advisory. PS interpreter - check Indexed colour space index NOTE: https://bugs.ghostscript.com/showbug.cgi?id=707990NOTE: https://cgit.ghostscript.com/cgi-...
Amazon Linux 2 : ghostscript (ALAS-2025-2760)
The version of ghostscript installed on the remote host is prior to 9.54.0-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2760 advisory. PS interpreter - check Indexed colour space index NOTE: https://bugs.ghostscript.com/showbug.cgi?id=707990NOTE:...
