Lucene search
K

6 matches found

OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2019-1065)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.65283EPSS
Exploits5References2
Oracle linux
Oracle linux
added 2019/08/13 12:0 a.m.46 views

ghostscript security, bug fix, and enhancement update

9.25-2 - obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel 9.25-1 - Rebase to latest upstream version bug 1636115 - Resolves: 1673399 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116 - Resolves: 1678172 - CVE-2019-3835 ghostscript: superexec...

9.8CVSS0.1AI score0.9181EPSS
Exploits13
Tenable Nessus
Tenable Nessus
added 2019/03/08 12:0 a.m.37 views

EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2019-1065)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ghostscript: access bypass in psi/zdevice2.c 700153 CVE-2018-19475 - ghostscript: access bypass in psi/zicc.c 700169 CVE-2018-19476 -...

7.8CVSS7.3AI score0.65283EPSS
Exploits5References5
RedHat Linux
RedHat Linux
added 2019/01/31 6:37 p.m.1 views

ghostscript: subroutines within pseudo-operators must themselves be pseudo-operators (700317)

It was found that ghostscript could leak sensitive operators on the operand stack when a pseudo-operator pushes a subroutine. A specially crafted PostScript file could use this flaw to escape the -dSAFER protection in order to, for example, have access to the file system outside of the SAFER...

7.8CVSS5.8AI score0.60542EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2019/01/23 8:20 p.m.26 views

CVE-2019-6116

It was found that ghostscript could leak sensitive operators on the operand stack when a pseudo-operator pushes a subroutine. A specially crafted PostScript file could use this flaw to escape the -dSAFER protection in order to, for example, have access to the file system outside of the SAFER...

9.3CVSS1.3AI score0.9181EPSS
Exploits6References3
OSV
OSV
added 2019/01/23 2:54 p.m.7 views

SUSE-SU-2019:0144-1 Security update for ghostscript

This update for ghostscript to version 9.26a fixes the following issues: Security issue fixed: - CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators bsc1122319...

7.8CVSS7.6AI score0.60542EPSS
Exploits2References3
Rows per page
Query Builder