According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that the ghostscript .tempfile     function did not properly handle file permissions. An     attacker could possibly exploit this to exploit this to     bypass the -dSAFER protection and delete files or     disclose their content via a specially crafted     PostScript document.i1/4^CVE-2018-15908i1/4%0

  - It was discovered that the ghostscript .shfill operator     did not properly validate certain types. An attacker     could possibly exploit this to bypass the -dSAFER     protection and crash ghostscript or, possibly, execute     arbitrary code in the ghostscript context via a     specially crafted PostScript     document.i1/4^CVE-2018-15909i1/4%0

  - It was discovered that ghostscript did not properly     verify the key used in aesdecode. An attacker could     possibly exploit this to bypass the -dSAFER protection     and crash ghostscript or, possibly, execute arbitrary     code in the ghostscript context via a specially crafted     PostScript document.i1/4^CVE-2018-15911i1/4%0

  - It was discovered that the ghostscript .type operator     did not properly validate its operands. A specially     crafted PostScript document could exploit this to crash     ghostscript or, possibly, execute arbitrary code in the     context of the ghostscript process.i1/4^CVE-2018-16511i1/4%0

  - It was discovered that the ghostscript did not properly     restrict access to files open prior to enabling the
    -dSAFER mode. An attacker could possibly exploit this     to bypass the -dSAFER protection and disclose the     content of affected files via a specially crafted     PostScript document.i1/4^CVE-2018-16539i1/4%0

  - It was discovered that the ghostscript device cleanup     did not properly handle devices replaced with a null     device. An attacker could possibly exploit this to     bypass the -dSAFER protection and crash ghostscript or,     possibly, execute arbitrary code in the ghostscript     context via a specially crafted PostScript     document.i1/4^CVE-2018-16541i1/4%0

  - An issue was discovered in Artifex Ghostscript before     9.25. Incorrect 'restoration of privilege' checking     when running out of stack during exception handling     could be used by attackers able to supply crafted     PostScript to execute code using the 'pipe'     instruction. This is due to an incomplete fix for     CVE-2018-16509.i1/4^CVE-2018-16802i1/4%0

  - It was found that RHSA-2018:2918 did not fully fix     CVE-2018-16509. An attacker could possibly exploit     another variant of the flaw and bypass the -dSAFER     protection to, for example, execute arbitrary shell     commands via a specially crafted PostScript     document.i1/4^CVE-2018-16863i1/4%0

  - Artifex Ghostscript before 9.25 allowed a user-writable     error exception table, which could be used by remote     attackers able to supply crafted PostScript to     potentially overwrite or replace error handlers to     inject code.i1/4^CVE-2018-17183i1/4%0

  - Artifex Ghostscript 9.25 and earlier allows attackers     to bypass a sandbox protection mechanism via vectors     involving errorhandler setup. NOTE: this issue exists     because of an incomplete fix for     CVE-2018-17183.i1/4^CVE-2018-17961i1/4%0

  - Artifex Ghostscript allows attackers to bypass a     sandbox protection mechanism by leveraging exposure of     system operators in the saved execution stack in an     error object.i1/4^CVE-2018-18073i1/4%0

  - Artifex Ghostscript 9.25 and earlier allows attackers     to bypass a sandbox protection mechanism via vectors     involving the 1Policy operator.i1/4^CVE-2018-18284i1/4%0

  - In Artifex Ghostscript through 9.25, the setpattern     operator did not properly validate certain types. A     specially crafted PostScript document could exploit     this to crash Ghostscript or, possibly, execute     arbitrary code in the context of the Ghostscript     process. This is a type confusion issue because of     failure to check whether the Implementation of a     pattern dictionary was a structure     type.i1/4^CVE-2018-19134i1/4%0

  - An issue was discovered in Artifex Ghostscript before     9.26. LockSafetyParams is not checked correctly if     another device is used.i1/4^CVE-2018-19409i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - ghostscript: Improperly implemented security check in zsetdevice function in psi/zdevice.c     (CVE-2018-19409)

  - Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier     allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as     demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write. (CVE-2015-3228)

  - The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote     attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is     mishandled in the color management module. (CVE-2016-10217)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that the ghostscript .tempfile     function did not properly handle file permissions. An     attacker could possibly exploit this to exploit this to     bypass the -dSAFER protection and delete files or     disclose their content via a specially crafted     PostScript document.i1/4^CVE-2018-15908i1/4%0

  - It was discovered that the ghostscript .shfill operator     did not properly validate certain types. An attacker     could possibly exploit this to bypass the -dSAFER     protection and crash ghostscript or, possibly, execute     arbitrary code in the ghostscript context via a     specially crafted PostScript     document.i1/4^CVE-2018-15909i1/4%0

  - It was discovered that ghostscript did not properly     verify the key used in aesdecode. An attacker could     possibly exploit this to bypass the -dSAFER protection     and crash ghostscript or, possibly, execute arbitrary     code in the ghostscript context via a specially crafted     PostScript document.i1/4^CVE-2018-15911i1/4%0

  - It was discovered that the ghostscript .type operator     did not properly validate its operands. A specially     crafted PostScript document could exploit this to crash     ghostscript or, possibly, execute arbitrary code in the     context of the ghostscript process.i1/4^CVE-2018-16511i1/4%0

  - It was discovered that the ghostscript did not properly     restrict access to files open prior to enabling the
    -dSAFER mode. An attacker could possibly exploit this     to bypass the -dSAFER protection and disclose the     content of affected files via a specially crafted     PostScript document.i1/4^CVE-2018-16539i1/4%0

  - It was discovered that the ghostscript device cleanup     did not properly handle devices replaced with a null     device. An attacker could possibly exploit this to     bypass the -dSAFER protection and crash ghostscript or,     possibly, execute arbitrary code in the ghostscript     context via a specially crafted PostScript     document.i1/4^CVE-2018-16541i1/4%0

  - An issue was discovered in Artifex Ghostscript before     9.25. Incorrect 'restoration of privilege' checking     when running out of stack during exception handling     could be used by attackers able to supply crafted     PostScript to execute code using the 'pipe'     instruction. This is due to an incomplete fix for     CVE-2018-16509.i1/4^CVE-2018-16802i1/4%0

  - It was found that RHSA-2018:2918 did not fully fix     CVE-2018-16509. An attacker could possibly exploit     another variant of the flaw and bypass the -dSAFER     protection to, for example, execute arbitrary shell     commands via a specially crafted PostScript     document.i1/4^CVE-2018-16863i1/4%0

  - Artifex Ghostscript before 9.25 allowed a user-writable     error exception table, which could be used by remote     attackers able to supply crafted PostScript to     potentially overwrite or replace error handlers to     inject code.i1/4^CVE-2018-17183i1/4%0

  - Artifex Ghostscript 9.25 and earlier allows attackers     to bypass a sandbox protection mechanism via vectors     involving errorhandler setup. NOTE: this issue exists     because of an incomplete fix for     CVE-2018-17183.i1/4^CVE-2018-17961i1/4%0

  - Artifex Ghostscript allows attackers to bypass a     sandbox protection mechanism by leveraging exposure of     system operators in the saved execution stack in an     error object.i1/4^CVE-2018-18073i1/4%0

  - Artifex Ghostscript 9.25 and earlier allows attackers     to bypass a sandbox protection mechanism via vectors     involving the 1Policy operator.i1/4^CVE-2018-18284i1/4%0

  - In Artifex Ghostscript through 9.25, the setpattern     operator did not properly validate certain types. A     specially crafted PostScript document could exploit     this to crash Ghostscript or, possibly, execute     arbitrary code in the context of the Ghostscript     process. This is a type confusion issue because of     failure to check whether the Implementation of a     pattern dictionary was a structure     type.i1/4^CVE-2018-19134i1/4%0

  - An issue was discovered in Artifex Ghostscript before     9.26. LockSafetyParams is not checked correctly if     another device is used.i1/4^CVE-2018-19409i1/4%0

  - It was discovered that ghostscript did not properly     handle certain stack overflow error conditions. An     attacker could possibly exploit this to bypass the
    -dSAFER protection and crash ghostscript or, possibly,     execute arbitrary code in the ghostscript context via a     specially crafted PostScript     document.i1/4^CVE-2018-16542i1/4%0

  - It was discovered that the type of the     LockDistillerParams parameter is not properly verified.
    An attacker could possibly exploit this to bypass the
    -dSAFER protection and crash ghostscript or, possibly,     execute arbitrary code in the ghostscript context via a     specially crafted PostScript     document.i1/4^CVE-2018-15910i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ghostscript to version 9.25 fixes the following issues :

These security issues were fixed :

  - CVE-2018-17183: Remote attackers were be able to supply     crafted PostScript to potentially overwrite or replace     error handlers to inject code (bsc#1109105)

  - CVE-2018-15909: Prevent type confusion using the .shfill     operator that could have been used by attackers able to     supply crafted PostScript files to crash the interpreter     or potentially execute code (bsc#1106172).

  - CVE-2018-15908: Prevent attackers that are able to     supply malicious PostScript files to bypass .tempfile     restrictions and write files (bsc#1106171).

  - CVE-2018-15910: Prevent a type confusion in the     LockDistillerParams parameter that could have been used     to crash the interpreter or execute code (bsc#1106173).

  - CVE-2018-15911: Prevent use uninitialized memory access     in the aesdecode operator that could have been used to     crash the interpreter or potentially execute code     (bsc#1106195).

  - CVE-2018-16513: Prevent a type confusion in the setcolor     function that could have been used to crash the     interpreter or possibly have unspecified other impact     (bsc#1107412).

  - CVE-2018-16509: Incorrect 'restoration of privilege'     checking during handling of /invalidaccess exceptions     could be have been used by attackers able to supply     crafted PostScript to execute code using the 'pipe'     instruction (bsc#1107410).

  - CVE-2018-16510: Incorrect exec stack handling in the     'CS' and 'SC' PDF primitives could have been used by     remote attackers able to supply crafted PDFs to crash     the interpreter or possibly have unspecified other     impact (bsc#1107411).

  - CVE-2018-16542: Prevent attackers able to supply crafted     PostScript files from using insufficient interpreter     stack-size checking during error handling to crash the     interpreter (bsc#1107413).

  - CVE-2018-16541: Prevent attackers able to supply crafted     PostScript files from using incorrect free logic in     pagedevice replacement to crash the interpreter     (bsc#1107421).

  - CVE-2018-16540: Prevent use-after-free in copydevice     handling that could have been used to crash the     interpreter or possibly have unspecified other impact     (bsc#1107420).

  - CVE-2018-16539: Prevent attackers able to supply crafted     PostScript files from using incorrect access checking in     temp file handling to disclose contents of files on the     system otherwise not readable (bsc#1107422).

  - CVE-2018-16543: gssetresolution and gsgetresolution     allowed attackers to have an unspecified impact     (bsc#1107423).

  - CVE-2018-16511: A type confusion in 'ztype' could have     been used by remote attackers able to supply crafted     PostScript to crash the interpreter or possibly have     unspecified other impact (bsc#1107426).

  - CVE-2018-16585: The .setdistillerkeys PostScript command     was accepted even though it is not intended for use     during document processing (e.g., after the startup     phase). This lead to memory corruption, allowing remote     attackers able to supply crafted PostScript to crash the     interpreter or possibly have unspecified other impact     (bsc#1107581).

  - CVE-2018-16802: Incorrect 'restoration of privilege'     checking when running out of stack during exception     handling could have been used by attackers able to     supply crafted PostScript to execute code using the     'pipe' instruction. This is due to an incomplete fix for     CVE-2018-16509 (bsc#1108027).

These non-security issues were fixed :

  - Fixes problems with argument handling, some unintended     results of the security fixes to the SAFER file access     restrictions (specifically accessing ICC profile files).

  - Avoid that ps2epsi fails with 'Error: /undefined in
    --setpagedevice--'

For additional changes please check http://www.ghostscript.com/doc/9.25/News.htm

This update was imported from the SUSE:SLE-15:Update update project.

Tavis Ormandy discovered multiple vulnerabilites in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or the execution of arbitrary code if a malformed Postscript file is processed (despite the dSAFER sandbox being enabled).

This update for ghostscript to version 9.25 fixes the following issues :

These security issues were fixed :

CVE-2018-17183: Remote attackers were be able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code (bsc#1109105)

CVE-2018-15909: Prevent type confusion using the .shfill operator that could have been used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code (bsc#1106172).

CVE-2018-15908: Prevent attackers that are able to supply malicious PostScript files to bypass .tempfile restrictions and write files (bsc#1106171).

CVE-2018-15910: Prevent a type confusion in the LockDistillerParams parameter that could have been used to crash the interpreter or execute code (bsc#1106173).

CVE-2018-15911: Prevent use uninitialized memory access in the aesdecode operator that could have been used to crash the interpreter or potentially execute code (bsc#1106195).

CVE-2018-16513: Prevent a type confusion in the setcolor function that could have been used to crash the interpreter or possibly have unspecified other impact (bsc#1107412).

CVE-2018-16509: Incorrect 'restoration of privilege' checking during handling of /invalidaccess exceptions could be have been used by attackers able to supply crafted PostScript to execute code using the 'pipe' instruction (bsc#1107410).

CVE-2018-16510: Incorrect exec stack handling in the 'CS' and 'SC' PDF primitives could have been used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact (bsc#1107411).

CVE-2018-16542: Prevent attackers able to supply crafted PostScript files from using insufficient interpreter stack-size checking during error handling to crash the interpreter (bsc#1107413).

CVE-2018-16541: Prevent attackers able to supply crafted PostScript files from using incorrect free logic in pagedevice replacement to crash the interpreter (bsc#1107421).

CVE-2018-16540: Prevent use-after-free in copydevice handling that could have been used to crash the interpreter or possibly have unspecified other impact (bsc#1107420).

CVE-2018-16539: Prevent attackers able to supply crafted PostScript files from using incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable (bsc#1107422).

CVE-2018-16543: gssetresolution and gsgetresolution allowed attackers to have an unspecified impact (bsc#1107423).

CVE-2018-16511: A type confusion in 'ztype' could have been used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact (bsc#1107426).

CVE-2018-16585: The .setdistillerkeys PostScript command was accepted even though it is not intended for use during document processing (e.g., after the startup phase). This lead to memory corruption, allowing remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact (bsc#1107581).

CVE-2018-16802: Incorrect 'restoration of privilege' checking when running out of stack during exception handling could have been used by attackers able to supply crafted PostScript to execute code using the 'pipe' instruction. This is due to an incomplete fix for CVE-2018-16509 (bsc#1108027).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ghostscript to version 9.25 fixes the following issues :

These security issues were fixed :

  - CVE-2018-17183: Remote attackers were be able to supply     crafted PostScript to potentially overwrite or replace     error handlers to inject code (bsc#1109105)

  - CVE-2018-15909: Prevent type confusion using the .shfill     operator that could have been used by attackers able to     supply crafted PostScript files to crash the interpreter     or potentially execute code (bsc#1106172).

  - CVE-2018-15908: Prevent attackers that are able to     supply malicious PostScript files to bypass .tempfile     restrictions and write files (bsc#1106171).

  - CVE-2018-15910: Prevent a type confusion in the     LockDistillerParams parameter that could have been used     to crash the interpreter or execute code (bsc#1106173).

  - CVE-2018-15911: Prevent use uninitialized memory access     in the aesdecode operator that could have been used to     crash the interpreter or potentially execute code     (bsc#1106195).

  - CVE-2018-16513: Prevent a type confusion in the setcolor     function that could have been used to crash the     interpreter or possibly have unspecified other impact     (bsc#1107412).

  - CVE-2018-16509: Incorrect 'restoration of privilege'     checking during handling of /invalidaccess exceptions     could be have been used by attackers able to supply     crafted PostScript to execute code using the 'pipe'     instruction (bsc#1107410).

  - CVE-2018-16510: Incorrect exec stack handling in the     'CS' and 'SC' PDF primitives could have been used by     remote attackers able to supply crafted PDFs to crash     the interpreter or possibly have unspecified other     impact (bsc#1107411).

  - CVE-2018-16542: Prevent attackers able to supply crafted     PostScript files from using insufficient interpreter     stack-size checking during error handling to crash the     interpreter (bsc#1107413).

  - CVE-2018-16541: Prevent attackers able to supply crafted     PostScript files from using incorrect free logic in     pagedevice replacement to crash the interpreter     (bsc#1107421).

  - CVE-2018-16540: Prevent use-after-free in copydevice     handling that could have been used to crash the     interpreter or possibly have unspecified other impact     (bsc#1107420).

  - CVE-2018-16539: Prevent attackers able to supply crafted     PostScript files from using incorrect access checking in     temp file handling to disclose contents of files on the     system otherwise not readable (bsc#1107422).

  - CVE-2018-16543: gssetresolution and gsgetresolution     allowed attackers to have an unspecified impact     (bsc#1107423).

  - CVE-2018-16511: A type confusion in 'ztype' could have     been used by remote attackers able to supply crafted     PostScript to crash the interpreter or possibly have     unspecified other impact (bsc#1107426).

  - CVE-2018-16585: The .setdistillerkeys PostScript command     was accepted even though it is not intended for use     during document processing (e.g., after the startup     phase). This lead to memory corruption, allowing remote     attackers able to supply crafted PostScript to crash the     interpreter or possibly have unspecified other impact     (bsc#1107581).

  - CVE-2018-16802: Incorrect 'restoration of privilege'     checking when running out of stack during exception     handling could have been used by attackers able to     supply crafted PostScript to execute code using the     'pipe' instruction. This is due to an incomplete fix for     CVE-2018-16509 (bsc#1108027).

These non-security issues were fixed :

  - Fixes problems with argument handling, some unintended     results of the security fixes to the SAFER file access     restrictions (specifically accessing ICC profile files).

  - Avoid that ps2epsi fails with 'Error: /undefined in
    --setpagedevice--'

For additional changes please check http://www.ghostscript.com/doc/9.25/News.htm and the changes file of the package. This update was imported from the SUSE:SLE-12:Update update project.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3768-1 advisory.

    Tavis Ormandy discovered multiple security issues in Ghostscript. If a user or automated system were     tricked into processing a specially crafted file, a remote attacker could possibly use these issues to     access arbitrary files, execute arbitrary code, or cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Artifex Ghostscript installed on the remote Windows host is prior to 9.24. It is, therefore, affected by multiple vulnerabilities due to improperly handling PostScript data. A context-dependent attacker could cause a buffer overflow, potentially crashing the service.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ghostscript packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in Artifex Ghostscript before     9.26. LockSafetyParams is not checked correctly if     another device is used. (CVE-2018-19409)

  - It was discovered that the ghostscript .tempfile     function did not properly handle file permissions. An     attacker could possibly exploit this to exploit this to     bypass the -dSAFER protection and delete files or     disclose their content via a specially crafted     PostScript document. (CVE-2018-15908)

  - An issue was discovered in Artifex Ghostscript before     9.25. Incorrect restoration of privilege checking when     running out of stack during exception handling could be     used by attackers able to supply crafted PostScript to     execute code using the pipe instruction. This is due     to an incomplete fix for CVE-2018-16509.
    (CVE-2018-16802)

  - It was discovered that the ghostscript device cleanup     did not properly handle devices replaced with a null     device. An attacker could possibly exploit this to     bypass the -dSAFER protection and crash ghostscript or,     possibly, execute arbitrary code in the ghostscript     context via a specially crafted PostScript document.
    (CVE-2018-16541)

  - It was discovered that ghostscript did not properly     verify the key used in aesdecode. An attacker could     possibly exploit this to bypass the -dSAFER protection     and crash ghostscript or, possibly, execute arbitrary     code in the ghostscript context via a specially crafted     PostScript document. (CVE-2018-15911)

  - It was discovered that the ghostscript did not properly     restrict access to files open prior to enabling the
    -dSAFER mode. An attacker could possibly exploit this to     bypass the -dSAFER protection and disclose the content     of affected files via a specially crafted PostScript     document. (CVE-2018-16539)

  - Artifex Ghostscript before 9.25 allowed a user-writable     error exception table, which could be used by remote     attackers able to supply crafted PostScript to     potentially overwrite or replace error handlers to     inject code. (CVE-2018-17183)

  - Artifex Ghostscript 9.25 and earlier allows attackers to     bypass a sandbox protection mechanism via vectors     involving errorhandler setup. NOTE: this issue exists     because of an incomplete fix for CVE-2018-17183.
    (CVE-2018-17961)

  - Artifex Ghostscript allows attackers to bypass a sandbox     protection mechanism by leveraging exposure of system     operators in the saved execution stack in an error     object. (CVE-2018-18073)

  - Artifex Ghostscript 9.25 and earlier allows attackers to     bypass a sandbox protection mechanism via vectors     involving the 1Policy operator. (CVE-2018-18284)

  - It was found that RHSA-2018:2918 did not fully fix     CVE-2018-16509. An attacker could possibly exploit     another variant of the flaw and bypass the -dSAFER     protection to, for example, execute arbitrary shell     commands via a specially crafted PostScript document.
    (CVE-2018-16863)

  - In Artifex Ghostscript through 9.25, the setpattern     operator did not properly validate certain types. A     specially crafted PostScript document could exploit this     to crash Ghostscript or, possibly, execute arbitrary     code in the context of the Ghostscript process. This is     a type confusion issue because of failure to check     whether the Implementation of a pattern dictionary was a     structure type. (CVE-2018-19134)

  - It was discovered that the ghostscript .shfill operator     did not properly validate certain types. An attacker     could possibly exploit this to bypass the -dSAFER     protection and crash ghostscript or, possibly, execute     arbitrary code in the ghostscript context via a     specially crafted PostScript document. (CVE-2018-15909)

  - It was discovered that the ghostscript .type operator     did not properly validate its operands. A specially     crafted PostScript document could exploit this to crash     ghostscript or, possibly, execute arbitrary code in the     context of the ghostscript process. (CVE-2018-16511)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
119901	EulerOS Virtualization 2.5.2 : ghostscript (EulerOS-SA-2018-1412)	Nessus	Huawei Local Security Checks	12/28/2018	5/26/2022	critical
198822	RHEL 6 : ghostscript (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	critical
121276	EulerOS Virtualization 2.5.1 : ghostscript (EulerOS-SA-2019-1016)	Nessus	Huawei Local Security Checks	1/22/2019	5/24/2022	critical
123326	openSUSE Security Update : ghostscript (openSUSE-2019-759)	Nessus	SuSE Local Security Checks	3/27/2019	6/10/2024	high
117369	Debian DSA-4288-1 : ghostscript - security update	Nessus	Debian Local Security Checks	9/10/2018	8/8/2024	high
123891	EulerOS Virtualization 2.5.3 : ghostscript (EulerOS-SA-2019-1205)	Nessus	Huawei Local Security Checks	4/9/2019	5/20/2022	critical
117901	SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2018:2975-1)	Nessus	SuSE Local Security Checks	10/3/2018	8/1/2024	high
117979	openSUSE Security Update : ghostscript (openSUSE-2018-1122)	Nessus	SuSE Local Security Checks	10/9/2018	7/31/2024	high
117595	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Ghostscript vulnerabilities (USN-3768-1)	Nessus	Ubuntu Local Security Checks	9/19/2018	8/27/2024	high
117980	openSUSE Security Update : ghostscript (openSUSE-2018-1123)	Nessus	SuSE Local Security Checks	10/9/2018	7/31/2024	high
120116	SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2018:2976-1)	Nessus	SuSE Local Security Checks	1/2/2019	7/10/2024	high
117459	Artifex Ghostscript Multiple Vulnerabilities	Nessus	Windows	9/12/2018	4/27/2020	high
127227	NewStart CGSL CORE 5.04 / MAIN 5.04 : ghostscript Multiple Vulnerabilities (NS-SA-2019-0046)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	5/19/2022	critical

Detections

Analytics

Plugins Search

critical

critical

critical

high

high

critical

high

high

high

high

high

high

critical