6439 matches found
USN-5224-2 ghostscript vulnerabilities
USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...
CVE-2018-15908
It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibly exploit this to exploit this to bypass the -dSAFER protection and delete files or disclose their content via a specially crafted PostScript document. Mitigation Please se...
Vulnerabilities fixed in Ghostscript
Vulnerabilities have been fixed in Ghostscript. A malicious person could potentially exploit the vulnerability to cause a denial-of-service cause. To do this, a specially prepared PostScript file to be processed by the Ghostscript instance. Because Ghostscript is commonly used on print servers in...
Ubuntu 16.04 ESM : Ghostscript vulnerabilities (USN-5224-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5224-2 advisory. USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the...
Ubuntu: Security Advisory (USN-5224-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5224-1 ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execut...
The vulnerability of the implementation of the sampled_data_finish() function in the software for processing, transforming, and generating Ghostscript documents allows a perpetrator to trigger a service failure.
The vulnerability of the implementation of the sampleddatafinish function in the software for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failur...
The vulnerability in the implementation of the sampled_data_sample function within the software suite for processing, transforming, and generating Ghostscript documents allows a perpetrator to trigger a service failure.
The vulnerability of the implementation of the sampleddatasample function in the software for processing, transforming, and generating Ghostscript documents is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Ubuntu 18.04 LTS / 20.04 LTS : Ghostscript vulnerabilities (USN-5224-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5224-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...
MGASA-2022-0012 Updated ghostscript packages fix security vulnerability
Use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 Heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp. CVE-2021-45949...
Updated ghostscript packages fix security vulnerability
Use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 Heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp. CVE-2021-45949...
Debian: Security Advisory (DSA-5038-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5038-1] ghostscript security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5038-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 08, 2022 https://www.debian.org/security/faq -...
DSA-5038-1 ghostscript - security update
Bulletin has no description...
Debian DSA-5038-1 : ghostscript - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5038 advisory. Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the...
ghostscript:gstoraster_fuzzer: Crash in gx_restrict_Pattern
Detailed Report: https://oss-fuzz.com/testcase?key=6595842935488512 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ceff800d Crash State: gxrestrictPattern gssetcolor...
Buffer Overflow
Ghostscript is vulnerable to buffer overflow. The vulnerability exists due to a lack of sanitization in sampleddatafinish called from sampleddatacontinue and interp in the heap...
ghostscript:gstoraster_fuzzer: Heap-use-after-free in pdfi_dereference
Detailed Report: https://oss-fuzz.com/testcase?key=4552956672868352 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7fec79ca2e84 Crash State: pdfidereference...
ghostscript:gstoraster_fuzzer: Crash in pdfi_free_array
Detailed Report: https://oss-fuzz.com/testcase?key=6583715994664960 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00013fff8001 Crash State: pdfifreearray pdfifreeobject...