DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Ghostscript: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2020-08-12
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ghostscript ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herzustellen.
01
beschreibt (25)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-17538US | medium5.5 | — | ||
A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of se… | ||||
| CVE-2020-16310US | medium5.5 | — | ||
A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a craft… | ||||
| CVE-2020-16309US | medium5.5 | — | ||
A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a craf… | ||||
| CVE-2020-16308US | medium5.5 | — | ||
A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PD… | ||||
| CVE-2020-16307US | medium5.5 | — | ||
A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service v… | ||||
| CVE-2020-16306US | medium5.5 | — | ||
A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript… | ||||
| CVE-2020-16305US | medium5.5 | — | ||
A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a c… | ||||
| CVE-2020-16304US | medium5.5 | — | ||
A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges via… | ||||
| CVE-2020-16303US | high7.8 | — | ||
A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a cr… | ||||
| CVE-2020-16302US | medium5.5 | — | ||
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted P… | ||||
| CVE-2020-16301US | medium5.5 | — | ||
A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a craf… | ||||
| CVE-2020-16300US | medium5.5 | — | ||
A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a craft… | ||||
| CVE-2020-16299US | medium5.5 | — | ||
A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via… | ||||
| CVE-2020-16298US | medium5.5 | — | ||
A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via… | ||||
| CVE-2020-16297US | medium5.5 | — | ||
A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of ser… | ||||
| CVE-2020-16296US | medium5.5 | — | ||
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of s… | ||||
| CVE-2020-16295US | medium5.5 | — | ||
A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… | ||||
| CVE-2020-16294US | medium5.5 | — | ||
A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted… | ||||
| CVE-2020-16293US | medium5.5 | — | ||
A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote att… | ||||
| CVE-2020-16292US | medium5.5 | — | ||
A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a c… | ||||
20 von 25 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory RHSA-2021:1852 vom 2021-05-18external
- Red Hat Security Advisory RHSA-2023:7053 vom 2023-11-15external
- Amazon Linux Security Advisory ALAS2-2023-2261 vom 2023-09-21external
- Amazon Linux Security Advisory ALAS2-2023-2308 vom 2023-10-20external
- Amazon Linux Security Advisory ALAS-2023-1854 vom 2023-10-06external
- Amazon Linux Security Advisory ALAS-2023-1867 vom 2023-10-25external
- Debian Security Advisory DLA-2335 vom 2020-08-20external
- NIST Database vom 2020-08-12external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan