Summary
Piotr Kajda discovered that Ghostscript incorrectly handled writing certain
files. An attacker could possibly use this issue to cause Ghostscript to
crash, resulting in a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.14+esm10 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.18+esm5 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | ghostscript | 9.50~dfsg-5ubuntu4.15+esm2 |
Vulnerabilities 2
-
Medium 4.3
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
-
Medium 4.3
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm…