SUSE CVE-2021-3781

A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highes...

SUSE CVE-2021-43113

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

SUSE CVE-2021-45944

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

SUSE CVE-2021-45949

Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp...

SUSE CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

ghostscript:gstoraster_fuzzer: Segv on unknown address in gs_function_Sd_init

Detailed Report: https://oss-fuzz.com/testcase?key=4555685393465344 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsfunctionSdinit sampleddatafinish...

SUSE: Security Advisory (SUSE-SU-2022:0088-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : ghostscript (SUSE-SU-2022:0088-3)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0088-3 advisory. - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in...

SUSE-SU-2022:0088-3 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in sampleddatafinish bsc1194304...

PT-2023-35792 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A heap-use-after-free READ 2 crash type has been identified, involving functions such as gc trace, gs gc reclaim, and ireclaim. Recommendations: At the moment, there is no information...

ghostscript:gs_device_faxg3_fuzzer: Heap-use-after-free in gc_trace

Detailed Report: https://oss-fuzz.com/testcase?key=4787397676367872 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicefaxg3fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x62a000334260 Crash State: gctrace...

Debian dla-3273 : libitext5-java - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3273 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3273-1 [email protected] https://www.debian.org/lts/security/...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1088)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.6 : ghostscript (EulerOS-SA-2023-1088)

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

ghostscript:gs_device_pxlmono_fuzzer: Crash in gc_trace

Detailed Report: https://oss-fuzz.com/testcase?key=6692749703512064 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01019fff7fff Crash State: gctrace gsgcreclaim...

ghostscript:gs_device_bmpmono_fuzzer: Segv on unknown address in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5361473184727040 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicebmpmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: chunkfreeobject...

Amazon Linux 2022 : ghostscript (ALAS2022-2022-230)

The version of ghostscript installed on the remote host is prior to 9.56.1-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-230 advisory. - A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of...

ghostscript:gs_device_xpswrite_fuzzer: Crash in gdev_mem_open_scan_lines_interleaved

Detailed Report: https://oss-fuzz.com/testcase?key=6625281161166848 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicexpswritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fede93a4cf8 Crash State:...

PT-2022-36796 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

ghostscript:gs_device_ps2write_fuzzer: Heap-use-after-free in gs_font_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=4965064002371584 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x63100a627798 Crash State:...