ghostscript:gs_device_psdcmyk_fuzzer: Heap-use-after-free in pdfi_cspace_free_callback

Detailed Report: https://oss-fuzz.com/testcase?key=5012590379270144 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepsdcmykfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x631000118868 Crash State:...

ghostscript:gs_device_ps2write_fuzzer: Stack-buffer-overflow in pdfi_read_cff_dict

Detailed Report: https://oss-fuzz.com/testcase?key=5911272708505600 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffefc71e981 Crash State:...

Ubuntu: Security Advisory (USN-6017-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6017-2: Ghostscript vulnerability

USN-6017-1 fixed vulnerabilities in Ghostscript. This update provides the corresponding updates for Ubuntu 23.04. Original advisory details: Hadrien Perrineau discovered that Ghostscript incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or...

Ubuntu 23.04 : Ghostscript vulnerability (USN-6017-2)

The remote Ubuntu 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6017-2 advisory. USN-6017-1 fixed vulnerabilities in Ghostscript. This update provides the corresponding updates for Ubuntu 23.04. Tenable has extracted the preceding description bloc...

Fedora: Security Advisory for ghostscript (FEDORA-2023-366850fc87)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for ghostscript (FEDORA-2023-fbf86d8916)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Out-of-bounds Write

ghostscript is vulnerable to Out-of-bounds Write. The vulnerability exists in base/sbcp.c because the buffer size is not checked which allows an attacker to cause buffer overflows...

[SECURITY] Fedora 38 Update: ghostscript-10.01.0-3.fc38

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

[SECURITY] Fedora 36 Update: ghostscript-9.56.1-7.fc36

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

Fedora 36 : ghostscript (2023-366850fc87)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-366850fc87 advisory. Security fix for CVE-2023-28879 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 38 : ghostscript (2023-fbf86d8916)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-fbf86d8916 advisory. Security fix for CVE-2023-28879 ---- set 'a4' as a default in gsinit.ps to fix unrecognized 'Letter' page size 2183166 Tenable has extracted the...

FreeBSD : ghostscript -- exploitable buffer overflow in (T)BCP in PS interpreter (25872b25-da2d-11ed-b715-a1e76793953b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 25872b25-da2d-11ed-b715-a1e76793953b advisory. - In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of...

ROS-20230414-01

A vulnerability in the Ghostscript document processing toolkit is related to a buffer overflow in the BCPEncode, BCPDecode, TBCPEncode and TBCPDecode handlers. BCPEncode, BCPDecode, TBCPEncode and TBCPDecode handlers, in case when the write buffer is underfilled by one byte and then a shielded...

Ubuntu: Security Advisory (USN-6017-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6017-1 ghostscript vulnerability

Hadrien Perrineau discovered that Ghostscript incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...

USN-6017-1: Ghostscript vulnerability

Hadrien Perrineau discovered that Ghostscript incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Ghostscript vulnerability (USN-6017-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6017-1 advisory. Hadrien Perrineau discovered that Ghostscript incorrectly handled certain inputs. An attacker could possibly use this issue to...

Fedora: Security Advisory for ghostscript (FEDORA-2023-f51bc947bb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ghostscript Heap Buffer Overflow Code Execution

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...