SUSE: Security Advisory (SUSE-SU-2019:0719-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ghostscript:gstoraster_fuzzer: Segv on unknown address in i_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=6028005563564032 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ifreeobject sclosefilters...

ghostscript:gstoraster_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5559346722373632 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003cc0f70 Crash State: NULL Sanitizer: address ASAN...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in gx_pattern_accum_finalize_cw

Detailed Report: https://oss-fuzz.com/testcase?key=4697192947384320 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gxpatternaccumfinalizecw...

EulerOS Virtualization 3.0.6.6 : ghostscript (EulerOS-SA-2021-1476)

According to the versions of the ghostscript packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A Division by Zero vulnerability in bj10vprintpage in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allow...

EulerOS Virtualization 3.0.2.6 : ghostscript (EulerOS-SA-2021-1434)

According to the versions of the ghostscript packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the jetp3852printpage function device/gdev3852.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ghostscript cif_print_page() DoS

The vulnerability of the cifprintpage function device/gdevcif.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the okiibmprintPage1 function device/gdevokii.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

dot24_print_page Ghostscript DoS

The vulnerability of the dot24printpage function device/gdevdm24.c in the software suite for processing, transforming, and generating Ghostscript documents is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ghostscript GetNumSameData Heap Buffer Overflow DoS

The vulnerability of the GetNumSameData function contrib/lips4/gdevlips.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the lxm5700mprintpage function device/gdevlxm.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service...

Ghostscript epsc_print_page Heap Buffer Overflow DoS

The vulnerability of the epscprintpage function device/gdevepsc.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ghostscript GetNumWrongData Heap Buffer Overflow DoS

The vulnerability of the GetNumWrongData function contrib/lips4/gdevlips.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause...

lprn_is_black() Ghostscript DoS

The vulnerability of the lprnisblack function contrib/lips4/gdevlprn.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the jetp3852printpage function device/gdev3852.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

bj10v_print_page Ghostscript DoS

The vulnerability of the bj10vprintpage function contrib/japanese/gdev10v.c in the software suite for processing, transforming, and generating Ghostscript documents is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ghostscript Image Render Buffer Overflow DoS

The vulnerability of the imagerendercolorthresh function base/gxicolor.c in the software for processing, transforming, and generating Ghostscript documents is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the composegroupnonknockoutnonblendisolatedallmaskcommon function base/gxblend.c in the software suite for processing, transforming, and generating Ghostscript documents is related to the use of a NULL pointer. Exploitation of this vulnerability could allow an attacker to cau...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the cljmediasize function device/gdevclj.c in the software suite for processing, transforming, and generating Ghostscript documents is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...