SUSE-SU-2022:0088-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in sampleddatafinish bsc1194304...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2022:0088-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0088-1 advisory. - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buff...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in s_hex_process

Detailed Report: https://oss-fuzz.com/testcase?key=5047840999604224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x631000074830 Crash State: shexprocess...

SUSE: Security Advisory (SUSE-SU-2022:0081-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in mem_true24_fill_rectangle

Detailed Report: https://oss-fuzz.com/testcase?key=4749278763941888 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x7fdb69479030 Crash State:...

ghostscript:gstoraster_fuzzer: Crash in chunk_obj_alloc

Detailed Report: https://oss-fuzz.com/testcase?key=5770434644148224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000bfff8004 Crash State: chunkobjalloc chunkallocbytes...

SUSE SLES12 Security Update : ghostscript (SUSE-SU-2022:0081-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0081-1 advisory. - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in...

Debian: Security Advisory (DLA-2879-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Use After Free

ghostscript is vulnerable to use after free. The vulnerability exists in the sampleddatasample called from sampleddatacontinue and interp...

[SECURITY] [DLA 2879-1] ghostscript security update

Debian LTS Advisory DLA-2879-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 14, 2022 https://wiki.debian.org/LTS Package : ghostscript Version : 9.26adfsg-0+deb9u8 CVE ID : CVE-2021-45944 CVE-2021-45949 Multiple security issues were discovered in...

SUSE-SU-2022:0081-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buffer overflow in sampleddatafinish bsc1194304...

OESA-2022-1487 ghostscript security update

Ghostscript is an interpreter for PostScript and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in mem_mono_copy_mono

Detailed Report: https://oss-fuzz.com/testcase?key=5202762432905216 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x62a00010712c Crash State: memmonocopymono...

DLA-2879-1 ghostscript - security update

Bulletin has no description...

ghostscript:gstoraster_fuzzer: Crash in pdfi_count_cff_index

Detailed Report: https://oss-fuzz.com/testcase?key=6395648855900160 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62cff74a7f56 Crash State: pdficountcffindex...

USN-5224-2 ghostscript vulnerabilities

USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...

USN-5224-2: Ghostscript vulnerabilities

USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...

CVE-2018-15908

It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibly exploit this to exploit this to bypass the -dSAFER protection and delete files or disclose their content via a specially crafted PostScript document. Mitigation Please se...

Vulnerabilities fixed in Ghostscript

Vulnerabilities have been fixed in Ghostscript. A malicious person could potentially exploit the vulnerability to cause a denial-of-service cause. To do this, a specially prepared PostScript file to be processed by the Ghostscript instance. Because Ghostscript is commonly used on print servers in...

Ubuntu: Security Advisory (USN-5224-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...