PT-2024-13961 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A heap corruption vulnerability has been identified in the PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary...

PT-2024-13960 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A buffer overflow vulnerability has been identified in the PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary...

Lexmark Printer RCE Vulnerability (CVE-2023-50735)

Multiple Lexmark printer devices are prone to remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFI...

Lexmark Printer RCE Vulnerability (CVE-2023-50734)

Multiple Lexmark printer devices are prone to remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFI...

Vulnerabilities fixed in Lexmark printers

Lexmark has fixed vulnerabilities in the firmware of several printers. The vulnerabilities are located in the Postscript interpreter and allow a malicious person with the ability to print commands the ability to send arbitrary code execute arbitrary code on the vulnerable system. Lexmark has...

Oracle Linux 8 : ghostscript (ELSA-2023-7053)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7053 advisory. - fix for CVE-2023-4042 - fix for CVE-2023-38559 - fix for CVE-2023-28879 Tenable has extracted the preceding description block directly from the Oracl...

Oracle Linux 9 : ghostscript (ELSA-2023-6544)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6544 advisory. - fix for CVE-2023-38559 - fix for CVE-2023-36664 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

ghostscript: buffer overflow in base/sbcp.c leading to data corruption

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then...

RHEL 8 : ghostscript (RHSA-2023:7053)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7053 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap...

PT-2023-8590 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A memory corruption vulnerability has been identified in the PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrar...

GLSA-202309-03 : GPL Ghostscript: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-03 GPL Ghostscript: Multiple Vulnerabilities - A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2311)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Artifex Ghostscript < 10.01.1 Buffer Overflow

The version of Artifex Ghostscript installed on the remote Windows host is prior to 10.01.1. It is, therefore, affected by a buffer overflow that can lead to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and...

EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2023-1820)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript...

EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2023-1802)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript...

Amazon Linux AMI : ghostscript (ALAS-2023-1734)

The version of ghostscript installed on the remote host is prior to 8.70-24.28. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1734 advisory. In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the...

Important: ghostscript

Issue Overview: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than ful...

Amazon Linux 2 : ghostscript (ALAS-2023-2019)

The version of ghostscript installed on the remote host is prior to 9.25-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2019 advisory. In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the...

USN-6017-2: Ghostscript vulnerability

USN-6017-1 fixed vulnerabilities in Ghostscript. This update provides the corresponding updates for Ubuntu 23.04. Original advisory details: Hadrien Perrineau discovered that Ghostscript incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or...

ROS-20230414-01

A vulnerability in the Ghostscript document processing toolkit is related to a buffer overflow in the BCPEncode, BCPDecode, TBCPEncode and TBCPDecode handlers. BCPEncode, BCPDecode, TBCPEncode and TBCPDecode handlers, in case when the write buffer is underfilled by one byte and then a shielded...