CVE-2025-27836
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Обновитесь до 9.50~dfsg-5ubuntu4.15
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости ghostscript
За последние 30 дней в ghostscript опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 50
CVE-2025-27835
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.
- Обновитесь до 9.50~dfsg-5ubuntu4.15
Опубликовано ОбновленоCVE-2025-27832
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.
- Обновитесь до 9.50~dfsg-5ubuntu4.15
Опубликовано ОбновленоCVE-2025-27830
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.
- Обновитесь до 9.50~dfsg-5ubuntu4.15
Опубликовано ОбновленоCVE-2024-46956
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.
- Обновитесь до 9.50~dfsg-5ubuntu4.14
Опубликовано ОбновленоCVE-2024-46955
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Обновитесь до 9.50~dfsg-5ubuntu4.14
Опубликовано ОбновленоCVE-2024-46953
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.
- Обновитесь до 9.50~dfsg-5ubuntu4.14
Опубликовано ОбновленоCVE-2024-46951
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.
- Обновитесь до 9.50~dfsg-5ubuntu4.14
Опубликовано ОбновленоCVE-2024-33871
An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.
- Обновитесь до 9.50~dfsg-5ubuntu4.12
Опубликовано ОбновленоCVE-2024-33870
An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of ../../foo to ./../../foo and this will grant access if ./ is permitted.
- Обновитесь до 9.50~dfsg-5ubuntu4.12
Опубликовано ОбновленоCVE-2024-33869
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.
- Обновитесь до 9.50~dfsg-5ubuntu4.12
Опубликовано ОбновленоCVE-2024-29510
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
- Обновитесь до 9.50~dfsg-5ubuntu4.12
Опубликовано ОбновленоCVE-2024-29508
Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
- Обновитесь до 9.50~dfsg-5ubuntu4.13
Опубликовано ОбновленоCVE-2023-52722
An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard.
- Обновитесь до 9.50~dfsg-5ubuntu4.12
Опубликовано ОбновленоCVE-2023-43115
In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).
- Обновитесь до 9.50~dfsg-5ubuntu4.11
Опубликовано ОбновленоCVE-2020-21890
Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document.
- Обновитесь до 9.50~dfsg-5ubuntu4.10
Опубликовано ОбновленоCVE-2020-21710
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
- Обновитесь до 9.50~dfsg-5ubuntu4.10
Опубликовано ОбновленоGhostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
- Обновитесь до 9.50~dfsg-5ubuntu4.9
Опубликовано ОбновленоCVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
- Обновитесь до 9.50~dfsg-5ubuntu4.8
Опубликовано ОбновленоCVE-2023-28879
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.
- Обновитесь до 9.50~dfsg-5ubuntu4.7
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.