ghostscript:gstoraster_fuzzer: Heap-use-after-free in sampled_data_continue

Detailed Report: https://oss-fuzz.com/testcase?key=5674311224524800 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x627000037800 Crash State:...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-1193)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2021-1193)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in gs_point_transform2fixed

Detailed Report: https://oss-fuzz.com/testcase?key=4533906818859008 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gspointtransform2fixed...

CentOS 8 : ghostscript (CESA-2019:0971)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0971 advisory. - ghostscript: superexec operator is available 700585 CVE-2019-3835 - ghostscript: forceput in DefineResource is still accessible 700576 CVE-2019-3838 ...

CentOS 8 : ghostscript (CESA-2019:3890)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3890 advisory. - ghostscript: -dSAFER escape in .charkeys 701841 CVE-2019-14869 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : ghostscript (CESA-2019:2591)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2591 advisory. - ghostscript: Safer mode bypass by .forceput exposure in .pdfhookDSCCreator 701445 CVE-2019-14811 - ghostscript: Safer mode bypass by .forceput exposu...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in sampled_data_sample

Detailed Report: https://oss-fuzz.com/testcase?key=4716855648452608 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x627000037800 Crash State: sampleddatasamp...

PT-2021-5708

Name of the Vulnerable Software and Affected Versions Ghostscript GhostPDL versions 9.50 through 9.53.3 Description The issue is related to a use-after-free in the sampled data sample function, which can be called from sampled data continue and interp. This can potentially allow an attacker to...

EulerOS 2.0 SP3 : ghostscript (EulerOS-SA-2021-1067)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A buffer overflow vulnerability in lprnisblack in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker t...

FreeBSD : Ghostscript -- SAFER Sandbox Breakout (62642942-590f-11eb-a0dc-8c164582fbac)

SO-AND-SO reports : A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-1067)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4686-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-1041)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities fixed in Ghostscript

Vulnerabilities have been fixed in Ghostscript. The vulnerabilities allow a malicious party to cause a denial-of-service cause and to execute arbitrary code under the privileges of the user. -= Ubuntu =- Canonical has made updates available for Ubuntu 16.04 LTS and 18.04 LTS to fix the...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists through a flaw in src/lib/openjp2/pi.c through openjpeg's conversion/encoding functionality that causes an out-of-bounds read...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists in opjt2encodepacket function of t2.c due to an out-of-bounds read which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists through in src/lib/openjp2/pi.c, as the openjpeg encoder could cause an out-of-bounds read...

USN-4686-1: Ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled certain image files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary co...

USN-4686-1 ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled certain image files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary co...