Ghostscript Heap Buffer Overflow DoS

The vulnerability of the cljmediasize function device/gdevclj.c in the software suite for processing, transforming, and generating Ghostscript documents is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ghostscript Buffer Overflow DoS

The vulnerability of the mjrastercmd function contrib/japanese/gdevmjc.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries. Exploiting this vulnerability may allow a malicious actor to cause service failures...

Ghostscript xps_finish_image_path Heap Buffer Overflow DoS

The vulnerability of the xpsfinishimagepath function device/vector/gdevxps.c in the software suite for processing, transforming, and generating Ghostscript documents is related to its use after release. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

contrib/gdevdj9.c DoS

The vulnerability of the contrib/gdevdj9.c component of the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Ghostscript pcx_write_rle() Heap Buffer Overflow DoS

The vulnerability of the pcxwriterle function contrib/japanese/gdev10v.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Ghostscript DoS

The vulnerability of the components of the software suite for processing, transforming, and generating Ghostscript documents, namely devices/vector/gdevtxtw.c and psi/zbfont.c, is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service...

Ghostscript p_print_image() Buffer Overflow DoS

The vulnerability of the pprintimage function device/gdevcdj.c in the software for processing, transforming, and generating Ghostscript documents is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Ghostscript tiff12_print_page Buffer Overflow DoS

The vulnerability of the tiff12printpage function device/gdevtfnx.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Ghostscript Heap Buffer Overflow DoS

The vulnerability of the mjcolorcorrect function contrib/japanese/gdevmjc.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Ghostscript NULL Pointer Use-After-Free DoS

The vulnerability of the devices/gdevtsep.c component of the software suite for processing, transforming, and generating Ghostscript documents is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ghostscript Buffer Overflow DoS

The vulnerability of the pjcommonprintpage function device/gdevpjet.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-1434)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-1476)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-1539)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : ghostscript (EulerOS-SA-2021-1539)

According to the versions of the ghostscript packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A buffer overflow vulnerability in jetp3852printpage in devices/gdev3852.c of Artifex Software GhostScript v9.50...

ghostscript:gstoraster_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5617946271547392 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003cc0f70 Crash State: NULL Sanitizer: address ASAN...

Important: ghostscript

Issue Overview: Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code. CVE-2018-17183 Artifex Ghostscript 9.25 and earlier allows...

Amazon Linux 2 : ghostscript (ALAS-2021-1598)

The version of ghostscript installed on the remote host is prior to 9.25-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1598 advisory. Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in cmd_drawing_color_usage

Detailed Report: https://oss-fuzz.com/testcase?key=5366717444390912 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cmddrawingcolorusage...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in sampled_data_sample

Detailed Report: https://oss-fuzz.com/testcase?key=5126099753369600 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x627000037800 Crash State: sampleddatasamp...