5494 matches found
DLA-2879-1 ghostscript - security update
Bulletin has no description...
USN-5224-2: Ghostscript vulnerabilities
USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...
USN-5224-2 ghostscript vulnerabilities
USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...
CVE-2018-15908
It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibly exploit this to exploit this to bypass the -dSAFER protection and delete files or disclose their content via a specially crafted PostScript document. Mitigation Please se...
Ubuntu 16.04 ESM : Ghostscript vulnerabilities (USN-5224-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5224-2 advisory. USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the...
Ubuntu: Security Advisory (USN-5224-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerabilities fixed in Ghostscript
Vulnerabilities have been fixed in Ghostscript. A malicious person could potentially exploit the vulnerability to cause a denial-of-service cause. To do this, a specially prepared PostScript file to be processed by the Ghostscript instance. Because Ghostscript is commonly used on print servers in...
USN-5224-1 ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execut...
The vulnerability of the implementation of the sampled_data_finish() function in the software for processing, transforming, and generating Ghostscript documents allows a perpetrator to trigger a service failure.
The vulnerability of the implementation of the sampleddatafinish function in the software for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failur...
Ubuntu 18.04 LTS / 20.04 LTS : Ghostscript vulnerabilities (USN-5224-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5224-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...
The vulnerability in the implementation of the sampled_data_sample function within the software suite for processing, transforming, and generating Ghostscript documents allows a perpetrator to trigger a service failure.
The vulnerability of the implementation of the sampleddatasample function in the software for processing, transforming, and generating Ghostscript documents is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
MGASA-2022-0012 Updated ghostscript packages fix security vulnerability
Use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 Heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp. CVE-2021-45949...
Updated ghostscript packages fix security vulnerability
Use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 Heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp. CVE-2021-45949...
Debian: Security Advisory (DSA-5038-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5038-1] ghostscript security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5038-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 08, 2022 https://www.debian.org/security/faq -...
Debian DSA-5038-1 : ghostscript - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5038 advisory. Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the...
DSA-5038-1 ghostscript - security update
Bulletin has no description...
Buffer Overflow
Ghostscript is vulnerable to buffer overflow. The vulnerability exists due to a lack of sanitization in sampleddatafinish called from sampleddatacontinue and interp in the heap...
