Lucene search
K

5485 matches found

CNVD
CNVD
added 2018/06/05 12:0 a.m.1 views

Artifex Ghostscript Information Disclosure Vulnerability

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

5.3CVSS7AI score0.00538EPSS
Exploits0References1
Prion
Prion
added 2018/06/01 12:29 p.m.24 views

Command injection

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5CVSS7.1AI score0.01443EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2018/06/01 12:29 p.m.2 views

DEBIAN-CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS7.2AI score0.00538EPSS
Exploits0References1
NVD
NVD
added 2018/06/01 12:29 p.m.18 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS7AI score0.00538EPSS
Exploits0References6
OSV
OSV
added 2018/06/01 12:29 p.m.11 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS7.5AI score
Exploits0References6
Cvelist
Cvelist
added 2018/06/01 12:0 p.m.18 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

7.7AI score0.00538EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2018/06/01 12:0 p.m.31 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS8.1AI score0.00538EPSS
Exploits0
CVE
CVE
added 2018/06/01 12:0 p.m.177 views

CVE-2018-11645

Ghostscript (psi/zfile.c) before 9.21rc1 permits the status command even with -dSAFER, enabling remote attackers to determine the existence and size of arbitrary files. This CVE (CVE-2018-11645) is referenced in multiple advisories; upstream context ties it to Ghostscript’s handling of SAFER and ...

5.3CVSS6.8AI score0.00538EPSS
Exploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2018/06/01 12:0 a.m.35 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS6.9AI score0.00538EPSS
Exploits0References2
OSV
OSV
added 2018/06/01 12:0 a.m.2 views

UBUNTU-CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS6.9AI score0.00538EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2018/05/30 12:0 a.m.60 views

Amazon Linux 2 : ghostscript (ALAS-2018-1022)

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.1AI score0.00648EPSS
Exploits0References2
Amazon
Amazon
added 2018/05/24 12:0 a.m.27 views

Medium: ghostscript

Issue Overview: The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have...

7.8CVSS8.4AI score0.00648EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/05/23 12:0 a.m.28 views

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:1369-1)

This update for ghostscript-library fixes the following issues : - CVE-2018-10194: Fixed a stack-based buffer overflow in gdevpdts.c bsc1090099 - Fixed a crash in the fix for CVE-2016-9601. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

7.8CVSS7AI score0.00648EPSS
Exploits0References6
OSV
OSV
added 2018/05/22 1:14 p.m.4 views

SUSE-SU-2018:1369-1 Security update for ghostscript-library

This update for ghostscript-library fixes the following issues: - CVE-2018-10194: Fixed a stack-based buffer overflow in gdevpdts.c bsc1090099 - Fixed a crash in the fix for CVE-2016-9601...

7.8CVSS6.8AI score0.00648EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2018/05/21 12:0 a.m.35 views

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2018:1332-1)

This update for ghostscript fixes the following issues : - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

7.8CVSS7.6AI score0.00648EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2018/05/21 12:0 a.m.31 views

openSUSE Security Update : ghostscript (openSUSE-2018-479)

This update for ghostscript fixes the following issues : - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

7.8CVSS7.6AI score0.00648EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/05/20 12:0 a.m.21 views

openSUSE: Security Advisory for ghostscript (openSUSE-SU-2018:1348-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS8AI score0.00648EPSS
Exploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2018/05/19 9:7 p.m.86 views

Security update for ghostscript (moderate)

This update for ghostscript fixes the following issues: - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 This update was imported from the SUSE:SLE-12:Update update project...

1.3AI score0.00648EPSS
Exploits0References1
OSV
OSV
added 2018/05/18 6:3 a.m.3 views

SUSE-SU-2018:1332-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099...

7.8CVSS7.8AI score0.00648EPSS
Exploits0References3
OSV
OSV
added 2018/05/04 5:29 p.m.7 views

MGASA-2018-0219 Updated ghostscript packages fix security vulnerability

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.7AI score0.00648EPSS
Exploits0References4
Rows per page
Query Builder