Lucene search
K

5485 matches found

Mageia
Mageia
added 2018/05/04 5:29 p.m.38 views

Updated ghostscript packages fix security vulnerability

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS6AI score0.00648EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2018/05/04 12:0 a.m.29 views

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:1140-1)

This update for ghostscript-library fixes several issues. These security issues were fixed : - CVE-2017-7207: The memgetbitsrectangle function allowed remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document bsc1030263. - CVE-2016-9601: Prevent...

7.8CVSS6.9AI score0.0129EPSS
Exploits6References32
OSV
OSV
added 2018/05/03 9:18 a.m.4 views

SUSE-SU-2018:1140-1 Security update for ghostscript-library

This update for ghostscript-library fixes several issues. These security issues were fixed: - CVE-2017-7207: The memgetbitsrectangle function allowed remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document bsc1030263. - CVE-2016-9601: Prevent...

7.8CVSS7.7AI score0.0129EPSS
Exploits6References22
OpenVAS
OpenVAS
added 2018/05/02 12:0 a.m.36 views

Fedora Update for ghostscript FEDORA-2018-3247413570

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00648EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2018/05/02 12:0 a.m.29 views

Fedora Update for ghostscript FEDORA-2018-226dac231f

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00648EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/05/01 12:0 a.m.30 views

Fedora 27 : ghostscript (2018-3247413570)

Security fix for CVE-2018-10194. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

7.8CVSS7.2AI score0.00648EPSS
Exploits0References3
Ubuntu
Ubuntu
added 2018/04/30 5:7 p.m.60 views

USN-3636-1: Ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled certain PostScript files. An attacker could possibly use this to cause a denial of server. CVE-2016-10317 It was discovered that Ghostscript incorrectly handled certain PDF files. An attacker could possibly use this to cause a denial of...

7.8CVSS6.7AI score0.00837EPSS
Exploits1
OSV
OSV
added 2018/04/30 5:7 p.m.2 views

USN-3636-1 ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled certain PostScript files. An attacker could possibly use this to cause a denial of server. CVE-2016-10317 It was discovered that Ghostscript incorrectly handled certain PDF files. An attacker could possibly use this to cause a denial of...

7.8CVSS6.8AI score0.00837EPSS
Exploits1References3
Fedora
Fedora
added 2018/04/30 4:38 p.m.33 views

[SECURITY] Fedora 27 Update: ghostscript-9.22-4.fc27

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

7.8CVSS1.5AI score0.00648EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/04/30 12:0 a.m.29 views

Fedora 26 : ghostscript (2018-226dac231f)

Security fix for CVE-2018-10194. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

7.8CVSS7.2AI score0.00648EPSS
Exploits0References3
Fedora
Fedora
added 2018/04/29 9:23 p.m.36 views

[SECURITY] Fedora 26 Update: ghostscript-9.20-11.fc26

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

7.8CVSS1.5AI score0.00648EPSS
Exploits0
Fedora
Fedora
added 2018/04/27 11:8 p.m.37 views

[SECURITY] Fedora 28 Update: ghostscript-9.23-2.fc28

This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...

7.8CVSS1.9AI score0.00648EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/04/27 12:0 a.m.44 views

Artifex Ghostscript PostScript Handling Buffer Overflow DoS

The version of Artifex Ghostscript installed on the remote Windows host is 9.22 or earlier. It is, therefore, affected by a denial of service vulnerability due to improperly handling PostScript data. A context-dependent attacker could cause a buffer overflow, potentially crashing the service. C...

7.8CVSS7.5AI score0.00648EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2018/04/26 12:0 a.m.27 views

Debian: Security Advisory (DLA-1363-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00648EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2018/04/26 12:0 a.m.32 views

Debian DLA-1363-1 : ghostscript security update

It was discovered that the settextdistance function in base/gdevpdts.c in the pdfwrite component in Ghostscript does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a...

7.8CVSS7.1AI score0.00648EPSS
Exploits0References3
Debian
Debian
added 2018/04/25 6:26 p.m.28 views

[SECURITY] [DLA 1363-1] ghostscript security update

Package : ghostscript Version : 9.05dfsg-6.3+deb7u8 CVE ID : CVE-2018-10194 Debian Bug : 896069 It was discovered that the settextdistance function in base/gdevpdts.c in the pdfwrite component in Ghostscript does not prevent overflows in text-positioning calculation, which allows remote attackers...

7.8CVSS7.6AI score0.00648EPSS
Exploits0
OSV
OSV
added 2018/04/25 12:0 a.m.27 views

DLA-1363-1 ghostscript - security update

Bulletin has no description...

7.8CVSS7.8AI score0.00648EPSS
Exploits0
OSV
OSV
added 2018/04/24 1:29 a.m.1 views

DEBIAN-CVE-2016-9601

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...

5.5CVSS6.7AI score0.0045EPSS
Exploits0References1
Prion
Prion
added 2018/04/24 1:29 a.m.27 views

Heap overflow

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...

4.3CVSS7.3AI score0.0045EPSS
Exploits0References6Affected Software3
OSV
OSV
added 2018/04/24 1:29 a.m.9 views

CVE-2016-9601

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...

5.5CVSS7.8AI score0.0045EPSS
Exploits0References6
Rows per page
Query Builder