[SECURITY] Fedora 35 Update: ghostscript-9.56.1-1.fc35

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in FT_Stream_ReadULong

Detailed Report: https://oss-fuzz.com/testcase?key=6176191119228928 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62e00000c450 Crash State:...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in pdfi_load_font

Detailed Report: https://oss-fuzz.com/testcase?key=4783989214281728 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6310000c4b18 Crash State: pdfiloadfont...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in gsicc_smask_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=6652212696186880 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x614000000dd8 Crash State: gsiccsmaskfinali...

ghostscript:gs_device_ps2write_fuzzer: Crash in pdfi_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5347646310580224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6310000a0858 Crash State: pdfifreeobject...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in pdfi_load_font_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=5103905893122048 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6310000f0850 Crash State:...

ghostscript:gs_device_pxlmono_fuzzer: Crash in pdfi_repair_file

Detailed Report: https://oss-fuzz.com/testcase?key=4942714512211968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x63100b5671d8 Crash State: pdfirepairfile...

ghostscript:gs_device_ps2write_fuzzer: Stack-use-after-return in rc_free_text_enum

Detailed Report: https://oss-fuzz.com/testcase?key=4600783475179520 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7efd9e76b2a0 Crash State:...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in gs_tifsSeekProc

Detailed Report: https://oss-fuzz.com/testcase?key=5193300629389312 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000020150 Crash State:...

Moodle PostScript Code Injection

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

GHSA-XP2F-9MX3-3C6P Moodle PostScript Code Injection

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

Remote Code Execution (RCE)

Moodle is vulnerable to Remote Code Execution. Due to an omitted execution parameter in the GhostScript command, an attacker is able to run code on the system by parsing PostScript code...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

UBUNTU-CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

Input validation

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...