Summary
It was discovered that Ghostscript contained multiple security issues. If a
user or automated system were tricked into processing a specially crafted
file, a remote attacker could possibly use these issues to access arbitrary
files, execute arbitrary code, or cause a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.1 |
Vulnerabilities 4
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device…
-
Unscored —
psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions becaus…
-
Unscored —
psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of…
-
Unscored —
psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because…