CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

CVE-2018-11645

Ghostscript (psi/zfile.c) before 9.21rc1 permits the status command even with -dSAFER, enabling remote attackers to determine the existence and size of arbitrary files. This CVE (CVE-2018-11645) is referenced in multiple advisories; upstream context ties it to Ghostscript’s handling of SAFER and ...

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

UBUNTU-CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

Amazon Linux 2 : ghostscript (ALAS-2018-1022)

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

Medium: ghostscript

Issue Overview: The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have...

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:1369-1)

This update for ghostscript-library fixes the following issues : - CVE-2018-10194: Fixed a stack-based buffer overflow in gdevpdts.c bsc1090099 - Fixed a crash in the fix for CVE-2016-9601. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE-SU-2018:1369-1 Security update for ghostscript-library

This update for ghostscript-library fixes the following issues: - CVE-2018-10194: Fixed a stack-based buffer overflow in gdevpdts.c bsc1090099 - Fixed a crash in the fix for CVE-2016-9601...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2018:1332-1)

This update for ghostscript fixes the following issues : - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

openSUSE Security Update : ghostscript (openSUSE-2018-479)

This update for ghostscript fixes the following issues : - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE: Security Advisory for ghostscript (openSUSE-SU-2018:1348-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for ghostscript (moderate)

This update for ghostscript fixes the following issues: - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 This update was imported from the SUSE:SLE-12:Update update project...

SUSE-SU-2018:1332-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099...

MGASA-2018-0219 Updated ghostscript packages fix security vulnerability

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

Updated ghostscript packages fix security vulnerability

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:1140-1)

This update for ghostscript-library fixes several issues. These security issues were fixed : - CVE-2017-7207: The memgetbitsrectangle function allowed remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document bsc1030263. - CVE-2016-9601: Prevent...

SUSE-SU-2018:1140-1 Security update for ghostscript-library

This update for ghostscript-library fixes several issues. These security issues were fixed: - CVE-2017-7207: The memgetbitsrectangle function allowed remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document bsc1030263. - CVE-2016-9601: Prevent...