CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

UBUNTU-CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

Input validation

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

CVE-2022-35649

CVE-2022-35649 affects Moodle via improper input validation when parsing PostScript code, enabling remote code execution on GhostScript

CVE-2022-35649: Improper Control of Generation of Code

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

ghostscript:gs_device_ps2write_fuzzer: Crash in names_string_ref

Detailed Report: https://oss-fuzz.com/testcase?key=6581616931110912 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001000 Crash State: namesstringref...

OESA-2022-1754 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large...

ghostscript:gs_device_pxlmono_fuzzer: Memcpy-param-overlap in FT_Stream_TryRead

Detailed Report: https://oss-fuzz.com/testcase?key=6297116250603520 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x6310000f2a78,0x6310000f2e78 and...

ghostscript:gstoraster_pdf_fuzzer: Segv on unknown address in gs_heap_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=4809892472422400 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpdffuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsheapfreeobject chunkfreeobjec...

ghostscript:gs_device_pxlmono_fuzzer: Heap-use-after-free in FT_Stream_ReadULong

Detailed Report: https://oss-fuzz.com/testcase?key=4522008968298496 Project: ghostscript Fuzzing Engine: honggfuzz Fuzz Target: gsdevicepxlmonofuzzer Job Type: honggfuzzasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x633000000850 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_JROF

Detailed Report: https://oss-fuzz.com/testcase?key=6196157350543360 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6310000ef41d Crash State: InsJROF...

ghostscript:gs_device_pdfwrite_fuzzer: Segv on unknown address in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5354287563145216 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: chunkfreeobject...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Interp

Detailed Report: https://oss-fuzz.com/testcase?key=5083228620324864 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62a0002bd068 Crash State: Interp...

ghostscript:gstoraster_ps_fuzzer: Heap-use-after-free in psi_device_ref_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=6416011861032960 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c0000010f0 Crash State:...

PT-2022-6323 · Canonical · Ubuntu

Name of the Vulnerable Software and Affected Versions: Mahara versions 21.04 through 21.04.6 Mahara versions 21.10 through 21.10.4 Mahara versions 22.04 through 22.04.2 Mahara version 22.10.0 Description: The vulnerability exists due to the lack of protection of the web page structure in the PDF...