OESA-2022-1754 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large...

GSD-2022-1003186 KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits

KVM: x86: Use trycmpxchguser to update guest PTE A/D bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...

GSD-2022-1002878 KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits

KVM: x86: Use trycmpxchguser to update guest PTE A/D bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

PT-2022-31449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.17.12 Description The issue concerns the use of try cmpxchg user to update guest PTE A/D bits in KVM x86. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-31141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue concerns the use of try cmpxchg user to update guest PTE A/D bits in KVM x86. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

Malicious code in satreg-bits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0d4daaf60d5c24936bced88eb121b8aac51af7b3d6e04742c73595ee9215a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5937 Malicious code in satreg-bits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0d4daaf60d5c24936bced88eb121b8aac51af7b3d6e04742c73595ee9215a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OSV-2022-492 Heap-buffer-overflow in jxl::BitsCoder::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48123 Crash type: Heap-buffer-overflow READ 8 Crash state: jxl::BitsCoder::Read jxl::ReadVisitor::Bits jxl::jpeg::JPEGData::VisitFields...

PT-2022-37045

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of jxl::BitsCoder::Read,...

CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

DEBIAN-CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

UBUNTU-CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

PT-2022-14846 · Unknown +2 · Ghostscript +2

Name of the Vulnerable Software and Affected Versions: Ghostscript affected versions not specified Description: A NULL pointer dereference issue was found in Ghostscript, occurring when it attempts to render a large number of bits in memory. The problem arises when allocating a buffer device,...

CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

CVE-2022-2085

CVE-2022-2085 is a NULL pointer dereference in Ghostscript triggered when rendering a large number of bits; for bpp > 64, mem_x_device is used and init_device_procs is missing, causing crashes. The issue affects various Ghostscript deployments (e.g., Artifex Ghostscript and GPL Ghostscript) an...

CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

kernel: security regression for CVE-2018-13405

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...

GSD-2022-1002482 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002202 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002018 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...