Lucene search
Veracode Vulnerability DatabaseVERACODE:33526HistoryJan 05, 2022 - 6:14 p.m.
Buffer Overflow
2022-01-0518:14:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
ghostscript
buffer overflow
vulnerability
heap
lack of sanitization
EPSS
0.001
Percentile
43.4%
Ghostscript is vulnerable to buffer overflow. The vulnerability exists due to a lack of sanitization in sampled_data_finish (called from sampled_data_continue and interp) in the heap.
References
bugs.chromium.org/p/oss-fuzz/issues/detail?id=34675
git.ghostscript.com/?p=ghostpdl.git;a=commit;h=2a3129365d3bc0d4a41f107ef175920d1505d1f7
github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
lists.debian.org/debian-lts-announce/2022/01/msg00006.html
security-tracker.debian.org/tracker/CVE-2021-45949
www.debian.org/security/2022/dsa-5038
Related
nvd
nvd
CVE-2021-45949
2022-01-01 00:15:08
debiancve
debiancve
CVE-2021-45949
2022-01-01 00:15:08
cve
cve
CVE-2021-45949
2022-01-01 00:15:08
ubuntucve
ubuntucve
CVE-2021-45949
2022-01-01 00:00:00
prion
prion
Heap overflow
2022-01-01 00:15:00
redhatcve
redhatcve
CVE-2021-45949
2022-02-01 09:32:22
osv
osv
CVE-2021-45949
2022-01-01 00:15:08
ghostscript - security update
2022-01-14 00:00:00
ghostscript vulnerabilities
2022-01-12 12:15:31
nessus
nessus
CentOS 9 : ghostscript-9.54.0-7.el9
2024-02-29 00:00:00
Debian DSA-5038-1 : ghostscript - security update
2022-01-08 00:00:00
SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2022:0088-1)
2022-01-17 00:00:00
alpinelinux
alpinelinux
CVE-2021-45949
2022-01-01 00:15:00
cvelist
cvelist
CVE-2021-45949
2021-12-31 23:54:37
openvas
openvas
Debian: Security Advisory (DLA-2879-1)
2022-01-15 00:00:00
openSUSE: Security Advisory for ghostscript (openSUSE-SU-2022:0088-2)
2022-02-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0088-3)
2023-02-01 00:00:00
ubuntu
ubuntu
Ghostscript vulnerabilities
2022-01-13 00:00:00
Ghostscript vulnerabilities
2022-01-12 00:00:00
suse
suse
Security update for ghostscript (moderate)
2022-02-14 00:00:00
Security update for htmldoc (important)
2022-03-21 00:00:00
mageia
mageia
Updated ghostscript packages fix security vulnerability
2022-01-11 10:12:42
debian
debian
[SECURITY] [DLA 2879-1] ghostscript security update
2022-01-14 21:51:50
[SECURITY] [DSA 5038-1] ghostscript security update
2022-01-08 10:33:43