Medium: ghostscript

Issue Overview: A buffer overflow vulnerability in epscprintpage in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. CVE-2020-16294 A divide by zero issue discovered in epsprintpage in...

Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents

A vulnerability was found in Artifex Ghostscript in gdevijs.c, allows a malicious remote attacker to perform remote code execution via crafted PostScript documents...

Important: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Ubuntu: Security Advisory (USN-6433-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6433-1: Ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PDF documents. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code...

USN-6433-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PDF documents. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Ghostscript vulnerability (USN-6433-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6433-1 advisory. It was discovered that Ghostscript incorrectly handled certain PDF documents. If a user or automated system were tricked into opening ...

Fedora: Security Advisory (FEDORA-2023-c2665a9ff3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: ghostscript-10.01.2-4.fc39

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

Fedora: Security Advisory for ghostscript (FEDORA-2023-66d60c3df7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: ghostscript-10.01.2-4.fc38

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

Fedora 38 : ghostscript (2023-66d60c3df7)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-66d60c3df7 advisory. fix for CVE-2023-43115 2241112 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in gx_image_enum_begin

Detailed Report: https://oss-fuzz.com/testcase?key=6443257430933504 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x62b00000e748 Crash State:...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2876)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2895)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

ghostscript is vulnerable to Denial Of Service DoS. The vulnerability exists due to the integer overflow in the plglyphname of plfont.c, which allows an attacker to cause an application by transforming a maliciously crafted PCL file to PDF format...

Remote Code Execution (RCE)

ghostscript is vulnerable to Remote Code Execution RCE. This vulnerability allows remote attackers to execute arbitrary code on the system by crafting a malicious PostScript document...

Denial Of Service (DoS)

ghostscript is vulnerable to Denial Of Service DoS. A divide-by-zero vulnerability in the epsprintpage function in gdevepsn.c allows a local attacker to cause a denial of service by opening a specially crafted PDF document...

Buffer Overflow

ghostscript is vulnerable to Buffer Overflows. A buffer overflow vulnerability in the cljmediasize function in devices/gdevclj.c allows a remote attacker to cause a denial of service or potentially execute arbitrary code by opening a specially crafted PDF document...

ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...