遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2026:93978 公告中提及的一個弱點影響。

    Ghostscript 套件含有用於轉譯 PostScript 和 PDF 文件的公用程式。Ghostscript 可將 PostScript 程式碼轉譯為常見的點陣圖格式，以便於顯示或列印程式碼。

    安全性修正：

    * ghostscript: RHEL 8 中重新出現 .charkeys -dSAFER 繞過問題（CVE-2026-112177）

    如需安全性問題的詳細資料，包括影響、CVSS 評分、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2026:93978 公告中提及的一个漏洞影响。

    Ghostscript 套件包含用于渲染 PostScript 和 PDF 文档的实用工具。Ghostscript 可将 PostScript 代码转换成通用 bitmap 格式，使代码可以显示或打印。

    安全修复：

    * ghostscript: RHEL 8 中重新出现 .charkeys -dSAFER 绕过问题（CVE-2026-112177）

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

リモート Redhat Enterprise Linux 8 ホストに、RHSA-2026:93978 アドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

    Ghostscript スイートには、PostScript ドキュメントと PDF ドキュメントをレンダリングするためのユーティリティが含まれています。Ghostscript は、コードを表示または印刷できるように PostScript コードを一般的なビットマップ形式に変換します。

    セキュリティ修正:

    * ghostscript: RHEL 8 における .charkeys による -dSAFER 回避の再発 (CVE-2026-112177)

    影響、CVSS スコア、謝辞、その他の関連情報を含むセキュリティ問題の詳細については、「参照」セクションに記載されている CVE のページを参照してください。

Tenable は、前述の記述ブロックを Red Hat Enterprise Linux セキュリティアドバイザリから直接抽出しています。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2241:05 advisory.

    * ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8 (CVE-2026-112177)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-93978 advisory.

    [9.27-20]
    - CVE-2026-112177 ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8
      -dSAFER bypass in RHEL 8

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_93978 advisory.

    * ghostscript: Reintroduction of .charkeys -dSAFER bypass in Rocky Linux 8 (CVE-2026-112177)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1400 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-112177:
    A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for     CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput     operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript     file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or     execute commands with the permissions of the Ghostscript process.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1794591941 advisory.

  - An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through     10.02.0 allows remote attackers to crash the application via a dangling pointer. (CVE-2023-46751)

  - An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when     parsing the filename format string (for the output filename) results in path truncation, and possible path     traversal and code execution. (CVE-2024-46953)

  - A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it     did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An     attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate     privileges within the Ghostscript and access files outside of restricted areas or execute commands.
    (CVE-2019-14869)

  - An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation     pointer in Pattern color space could lead to arbitrary code execution. (CVE-2024-46951)

  - A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software     GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in     v9.51. (CVE-2020-16303)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:93978 advisory.

    * ghostscript: Reintroduction of .charkeys -dSAFER bypass in Rocky Linux 8 (CVE-2026-112177)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93978 advisory.

    The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript     translates PostScript code to common bitmap formats so that the code can be displayed or printed.

    Security Fix(es):

    * ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8 (CVE-2026-112177)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1794592034 advisory.

  - An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through     10.02.0 allows remote attackers to crash the application via a dangling pointer. (CVE-2023-46751)

  - An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when     parsing the filename format string (for the output filename) results in path truncation, and possible path     traversal and code execution. (CVE-2024-46953)

  - A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it     did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An     attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate     privileges within the Ghostscript and access files outside of restricted areas or execute commands.
    (CVE-2019-14869)

  - An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation     pointer in Pattern color space could lead to arbitrary code execution. (CVE-2024-46951)

  - A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software     GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in     v9.51. (CVE-2020-16303)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
375312	RHEL 8：ghostscript (RHSA-2026:93978)	Nessus	Red Hat Local Security Checks	2026/11/2	2026/11/2	high
375312	RHEL 8：ghostscript (RHSA-2026:93978)	Nessus	Red Hat Local Security Checks	2026/11/2	2026/11/2	high
375312	RHEL 8：ghostscript（RHSA-2026:93978）	Nessus	Red Hat Local Security Checks	2026/11/2	2026/11/2	high
375771	MiracleLinux 8 : ghostscript-9.27-20.el8_10 (AXSA:2026-2241:05)	Nessus	Miracle Linux Local Security Checks	2026/11/4	2026/11/4	high
375391	Oracle Linux 8 : ghostscript (ELSA-2026-93978)	Nessus	Oracle Linux Local Security Checks	2026/11/3	2026/11/3	high
376394	Rocky Linux 8 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2026_93978)	Nessus	Rocky Linux Local Security Checks	2026/11/5	2026/11/5	high
379298	TencentOS Server 3: ghostscript (TSSA-2026:1400)	Nessus	Tencent Local Security Checks	2026/11/11	2026/11/11	high
380615	CentOS Linux 8.4 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1794591941)	Nessus	CentOS Local Security Checks	2026/11/13	2026/11/13	high
375452	RockyLinux 8 : ghostscript (RLSA-2026:93978)	Nessus	Rocky Linux Local Security Checks	2026/11/3	2026/11/3	high
375312	RHEL 8 : ghostscript (RHSA-2026:93978)	Nessus	Red Hat Local Security Checks	2026/11/2	2026/11/2	high
380617	CentOS Linux 8.5 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1794592034)	Nessus	CentOS Local Security Checks	2026/11/13	2026/11/13	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high