Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ghostscript ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herzustellen.
Product
Ghostscript ist ein kostenloser Interpreter der Seitenbeschreibungssprachen PostScript und Portable Document Format (PDF).
Vulnerabilities 25
-
Unscored —
A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 al…
-
Unscored —
A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 a…
-
Unscored —
A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a…
-
Unscored —
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 al…
-
Unscored —
A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote att…
-
Unscored —
A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 …
-
Unscored —
A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblen…
-
Unscored —
A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows…
-
Unscored —
A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50…
-
Unscored —
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v…
-
Unscored —
A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.…
-
Unscored —
A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.…
-
Unscored —
A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9…
-
Unscored —
A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allo…
-
Unscored —
A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 all…
-
Unscored —
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 al…
-
Unscored —
A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v…
-
Unscored —
A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18…
-
Unscored —
A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 …
-
Unscored —
A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote at…
-
Unscored —
A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript …
-
Unscored —
A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a …
-
Unscored —
A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 all…
-
Unscored —
A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allo…
-
Unscored —
A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9…
Revision history
-
#11
Neue Updates von Red Hat aufgenommen
-
#10
Neue Updates von Amazon aufgenommen
-
#9
Neue Updates von Amazon aufgenommen
-
#8
Neue Updates von Amazon aufgenommen
-
#7
Neue Updates von Amazon aufgenommen
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von GENTOO aufgenommen
-
#4
Neue Updates von Debian aufgenommen
-
#3
Neue Updates von Ubuntu aufgenommen
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2023:7053 vom 2023-11-15
https://access.redhat.com/errata/RHSA-2023:7053
-
Amazon Linux Security Advisory ALAS-2023-1867 vom 2023-10-25
https://alas.aws.amazon.com/ALAS-2023-1867.html
-
Amazon Linux Security Advisory ALAS2-2023-2308 vom 2023-10-20
https://alas.aws.amazon.com/AL2/ALAS-2023-2308.html
-
Amazon Linux Security Advisory ALAS-2023-1854 vom 2023-10-06
https://alas.aws.amazon.com/ALAS-2023-1854.html
-
Amazon Linux Security Advisory ALAS2-2023-2261 vom 2023-09-21
https://alas.aws.amazon.com/AL2/ALAS-2023-2261.html
-
GhostScript Release Notes vom 2020-08-12
https://www.ghostscript.com/doc/9.52/History9.htm
-
NIST Database vom 2020-08-12
https://nvd.nist.gov/vuln/detail/CVE-2020-16287
-
Debian Security Advisory DLA-2335 vom 2020-08-20
https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202008/msg00032.html
-
Ubuntu Security Notice USN-4469-1 vom 2020-08-24
https://usn.ubuntu.com/4469-1/
-
Debian Security Advisory DSA-4748 vom 2020-08-26
https://www.debian.org/security/2020/dsa-4748
-
Gentoo Security Advisory GLSA-202008-20 vom 2020-08-29
https://security.gentoo.org/glsa/202008-20
-
Red Hat Security Advisory RHSA-2021:1852 vom 2021-05-18
https://access.redhat.com/errata/RHSA-2021:1852