Lucene search
K

5485 matches found

RedHat Linux
RedHat Linux
added 2025/04/30 9:14 a.m.7 views

ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript

A flaw was found in Artifex Ghostscript base/gsdevice.c. This vulnerability allows path truncation, path traversal, and possible code execution via an integer overflow when parsing the filename format string for the output filename...

7.8CVSS6.2AI score0.00387EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/04/30 9:14 a.m.4 views

ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service...

7.1CVSS6AI score0.00437EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/04/30 9:14 a.m.13 views

Moderate: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

8.4CVSS6.9AI score0.01543EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/04/30 9:14 a.m.12 views

ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space

A flaw was found in Artifex Ghostscript's psi/zcolor.c component. This vulnerability allows arbitrary code execution via an unchecked implementation pointer in the Pattern color space...

7.8CVSS6.2AI score0.00356EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/04/30 9:14 a.m.5 views

ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding

A flaw was found in Ghostscript/base/gputf8.c. This vulnerability allows directory traversal via overlong UTF-8 encoding, potentially leading to unauthorized access to filesystem directories...

8.4CVSS5.7AI score0.0055EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2025/04/30 9:14 a.m.4 views

ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution

A flaw was found in Artifex Ghostscript's psi/zfile.c component. This vulnerability allows arbitrary code execution via out-of-bounds data access...

7.8CVSS6.2AI score0.00388EPSS
Exploits0References8
Oracle linux
Oracle linux
added 2025/04/30 12:0 a.m.61 views

ghostscript security update

9.27-16 - RHEL-18396 CVE-2023-46751 ghostscript: dangling pointer in gdevprnopenprinterseekable - RHEL-67046 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-15067 CVE-2020-27792 ghostscript: heap buffer over write vulnerability in GhostScript...

7.8CVSS7.9AI score0.01543EPSS
Exploits0
OSV
OSV
added 2025/04/30 12:0 a.m.13 views

ALSA-2025:4362 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: heap buffer over write vulnerability in GhostScript's lp8000printpage in...

8.4CVSS7.7AI score0.01543EPSS
Exploits0References16
Tenable Nessus
Tenable Nessus
added 2025/04/30 12:0 a.m.12 views

Oracle Linux 8 : ghostscript (ELSA-2025-4362)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4362 advisory. - RHEL-18396 CVE-2023-46751 ghostscript: dangling pointer in gdevprnopenprinterseekable - RHEL-67046 CVE-2024-46951 ghostscript: Arbitrary Code Executi...

8.4CVSS6.9AI score0.01543EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2025/04/30 12:0 a.m.26 views

RHEL 8 : ghostscript (RHSA-2025:4362)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4362 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap...

8.4CVSS7.1AI score0.01543EPSS
Exploits0References17
AlmaLinux
AlmaLinux
added 2025/04/30 12:0 a.m.18 views

Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: heap buffer over write vulnerability in GhostScript's lp8000printpage in...

8.4CVSS7.9AI score0.01543EPSS
Exploits0References16
RedhatCVE
RedhatCVE
added 2025/04/28 12:0 a.m.22 views

CVE-2025-46646

A flaw was found in Artifex Ghostscript, specifically in the decodeutf8 function within base/gputf8.c. The issue arises from the mishandling of overlong UTF-8 encoding, which can lead to unexpected behavior when processing certain inputs. This flaw could allow an attacker to manipulate text...

4.5CVSS5.6AI score0.0055EPSS
Exploits0References5
OSV
OSV
added 2025/04/26 3:15 p.m.21 views

CVE-2025-46646

In Artifex Ghostscript before 10.05.0, decodeutf8 in base/gputf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954...

4.5CVSS6.8AI score
Exploits0References2
NVD
NVD
added 2025/04/26 3:15 p.m.20 views

CVE-2025-46646

In Artifex Ghostscript before 10.05.0, decodeutf8 in base/gputf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954...

4.5CVSS0.00155EPSS
Exploits0References2
OSV
OSV
added 2025/04/26 3:15 p.m.1 views

DEBIAN-CVE-2025-46646

In Artifex Ghostscript before 10.05.0, decodeutf8 in base/gputf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954...

4.5CVSS4.8AI score0.00155EPSS
Exploits0References1
OSV
OSV
added 2025/04/26 3:15 p.m.1 views

ALPINE-CVE-2025-46646

In Artifex Ghostscript before 10.05.0, decodeutf8 in base/gputf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954...

4.5CVSS7AI score0.00155EPSS
Exploits0References1
OSV
OSV
added 2025/04/26 3:15 p.m.1 views

UBUNTU-CVE-2025-46646

In Artifex Ghostscript before 10.05.0, decodeutf8 in base/gputf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954...

4.5CVSS5.8AI score0.00155EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/04/26 12:0 a.m.12 views

CVE-2025-46646

In Artifex Ghostscript before 10.05.0, decodeutf8 in base/gputf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954...

4.5CVSS6.9AI score0.00155EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/04/26 12:0 a.m.33 views

CVE-2025-46646

In Artifex Ghostscript before 10.05.0, decodeutf8 in base/gputf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954...

4.5CVSS0.00155EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/26 12:0 a.m.3 views

PT-2025-17960

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.05.0 Description The issue is related to the mishandling of overlong UTF-8 encoding in the decode utf8 function in base/gp utf8.c. This problem exists due to an incomplete fix for a previous issue...

4.5CVSS6.7AI score0.00155EPSS
Exploits0References45
Rows per page
Query Builder