Lucene search
+L

5494 matches found

OSV
OSV
added 2021/09/10 12:0 a.m.30 views

DSA-4972-1 ghostscript - security update

Bulletin has no description...

9.9CVSS9.3AI score0.83913EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/09/10 12:0 a.m.76 views

Ubuntu 20.04 LTS : Ghostscript vulnerability (USN-5075-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5075-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted...

9.9CVSS8.5AI score0.83913EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/09/08 1:28 a.m.52 views

CVE-2021-3781

A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highes...

9.9CVSS7.3AI score0.83913EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/08 1:28 a.m.5 views

UBUNTU-CVE-2021-3781

A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highes...

9.9CVSS7.5AI score0.83913EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/09/08 12:0 a.m.10 views

GhostScript remote command execution vulnerability

GhostScript is an interpreter used for PostScript language and PDF files, and many software components rely on it to complete the corresponding functions, and thus will also be affected by the Ghostscript vulnerability. ghostScript remote command execution vulnerability, an attacker can use the...

2.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/09/08 12:0 a.m.7 views

PT-2021-8068 · Unknown +5 · Ghostscript +5

Name of the Vulnerable Software and Affected Versions: Ghostscript affected versions not specified Description: A trivial sandbox escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary...

9.9CVSS6.9AI score0.9614EPSS
SaveExploits34References105
Tenable Nessus
Tenable Nessus
added 2021/07/21 12:0 a.m.70 views

EulerOS Virtualization 3.0.2.2 : ghostscript (EulerOS-SA-2021-2135)

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ghostscript is a set of software that provides a PostScriptinterpreter, a set of C procedures the Ghostscript library,...

7.8CVSS8AI score0.0275EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2021/07/07 12:0 a.m.26 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-2135)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0275EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2021/07/07 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-2089)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.0275EPSS
SaveExploits10References2
Rosalinux
Rosalinux
added 2021/07/02 4:44 p.m.40 views

Advisory ROSA-SA-2021-1841

Software: ghostscript 9.25 OS: Cobalt 7.9 CVE-ID: CVE-2018-19478 CVE-Crit: MEDIUM CVE-DESC: In Artifex Ghostscript before 9.26, a carefully crafted PDF file can run extremely long calculations when parsing the file. CVE-STATUS: default CVE-REV: default CVE-ID: CVE-2020-14373 CVE-Crit: MEDIUM...

5.5CVSS6.7AI score0.01888EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/07/02 12:0 a.m.30 views

EulerOS Virtualization for ARM 64 3.0.2.0 : ghostscript (EulerOS-SA-2021-2089)

According to the versions of the ghostscript package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The gsallocrefarray function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial...

7.8CVSS6.9AI score0.0275EPSS
SaveExploits10References13
Veracode
Veracode
added 2021/06/21 6:56 p.m.31 views

Denial Of Service

ghostscript is vulnerable to denial of service. The vulnerability exists due to a memory corruption. An attacker is able to override file access controls by using non-standard PostScript that resulted in a size that was too large, and could underflow to max uint32t...

9.8CVSS3.1AI score0.05186EPSS
SaveExploits0References12Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/06/10 12:0 a.m.31 views

SUSE SLES11 : Recommended update for ghostscript-library (SUSE-SU-2019:14155-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2019:14155-1 advisory. - It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript...

7.3CVSS6.6AI score0.02642EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2017:1153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.9614EPSS
SaveExploits7References6
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2018:1884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.01905EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2016:2493-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.06419EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2012:0531-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.5AI score0.06755EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2016:2723-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS9AI score0.03212EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2019:0145-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.39479EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2018:3330-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7AI score0.92499EPSS
SaveExploits5References11
Rows per page
Query Builder