Ubuntu 18.04 LTS / 20.04 LTS : Ghostscript vulnerabilities (USN-5224-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5224-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...

Ghostscript sampled_data_finish() DoS

The vulnerability of the implementation of the sampleddatafinish function in the software for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failur...

Ghostscript sampled_data_sample Heap Buffer Overflow DoS

The vulnerability of the implementation of the sampleddatasample function in the software for processing, transforming, and generating Ghostscript documents is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

MGASA-2022-0012 Updated ghostscript packages fix security vulnerability

Use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 Heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp. CVE-2021-45949...

Updated ghostscript packages fix security vulnerability

Use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 Heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp. CVE-2021-45949...

Debian: Security Advisory (DSA-5038-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5038-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5038-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 08, 2022 https://www.debian.org/security/faq -...

DSA-5038-1 ghostscript - security update

Bulletin has no description...

Debian DSA-5038-1 : ghostscript - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5038 advisory. Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the...

ghostscript:gstoraster_fuzzer: Crash in gx_restrict_Pattern

Detailed Report: https://oss-fuzz.com/testcase?key=6595842935488512 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ceff800d Crash State: gxrestrictPattern gssetcolor...

Buffer Overflow

Ghostscript is vulnerable to buffer overflow. The vulnerability exists due to a lack of sanitization in sampleddatafinish called from sampleddatacontinue and interp in the heap...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in pdfi_dereference

Detailed Report: https://oss-fuzz.com/testcase?key=4552956672868352 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7fec79ca2e84 Crash State: pdfidereference...

ghostscript:gstoraster_fuzzer: Crash in pdfi_free_array

Detailed Report: https://oss-fuzz.com/testcase?key=6583715994664960 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00013fff8001 Crash State: pdfifreearray pdfifreeobject...

CVE-2021-45949

Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp...

CVE-2021-45944

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

CVE-2021-45944

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

DEBIAN-CVE-2021-45944

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

DEBIAN-CVE-2021-45949

Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp...

CVE-2021-45949

Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp...

CVE-2021-45949

Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp...