ghostscript:gstoraster_fuzzer: Segv on unknown address in gs_function_Sd_init

Detailed Report: https://oss-fuzz.com/testcase?key=4555685393465344 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsfunctionSdinit sampleddatafinish...

SUSE SLES15 Security Update : ghostscript (SUSE-SU-2022:0088-3)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0088-3 advisory. - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in...

SUSE: Security Advisory (SUSE-SU-2022:0088-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0088-3 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in sampleddatafinish bsc1194304...

PT-2023-35792 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A heap-use-after-free READ 2 crash type has been identified, involving functions such as gc trace, gs gc reclaim, and ireclaim. Recommendations: At the moment, there is no information...

ghostscript:gs_device_faxg3_fuzzer: Heap-use-after-free in gc_trace

Detailed Report: https://oss-fuzz.com/testcase?key=4787397676367872 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicefaxg3fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x62a000334260 Crash State: gctrace...

Debian dla-3273 : libitext5-java - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3273 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3273-1 [email protected] https://www.debian.org/lts/security/...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1088)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.6 : ghostscript (EulerOS-SA-2023-1088)

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

ghostscript:gs_device_pxlmono_fuzzer: Crash in gc_trace

Detailed Report: https://oss-fuzz.com/testcase?key=6692749703512064 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01019fff7fff Crash State: gctrace gsgcreclaim...

ghostscript:gs_device_bmpmono_fuzzer: Segv on unknown address in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5361473184727040 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicebmpmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: chunkfreeobject...

Amazon Linux 2022 : ghostscript (ALAS2022-2022-230)

The version of ghostscript installed on the remote host is prior to 9.56.1-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-230 advisory. - A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of...

ghostscript:gs_device_xpswrite_fuzzer: Crash in gdev_mem_open_scan_lines_interleaved

Detailed Report: https://oss-fuzz.com/testcase?key=6625281161166848 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicexpswritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fede93a4cf8 Crash State:...

PT-2022-36796 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

ghostscript:gs_device_ps2write_fuzzer: Heap-use-after-free in gs_font_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=4965064002371584 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x63100a627798 Crash State:...

PT-2022-36793 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with a type of UNKNOWN READ. The crash state includes functions such as chunk free object, ngx final DeviceN, and gs cspace...

ghostscript:gstoraster_pdf_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5392409959989248 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpdffuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000024b0 Crash State: chunkfreeobject...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in cmap_put_ranges

Detailed Report: https://oss-fuzz.com/testcase?key=5131595420139520 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f24a2371520 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in sputs

Detailed Report: https://oss-fuzz.com/testcase?key=4993238444670976 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6310000b0830 Crash State: sputs...

GPL Ghostscript: Multiple Vulnerabilities

Background Ghostscript is an interpreter for the PostScript language and for PDF. Description Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workarou...