The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1852 advisory.

  - ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS (CVE-2020-14373)

  - ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS     (CVE-2020-16287)

  - ghostscript: buffer overflow in pj_common_print_page() in devices/gdevpjet.c could result in a DoS     (CVE-2020-16288)

  - ghostscript: buffer overflow in cif_print_page() in devices/gdevcif.c could result in a DoS     (CVE-2020-16289)

  - ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS     (CVE-2020-16290)

  - ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS (CVE-2020-16291)

  - ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS     (CVE-2020-16292)

  - ghostscript: NULL pointer dereference in compose_group_nonknockout_nonblend_isolated_allmask_common() in     base/gxblend.c could result in a DoS (CVE-2020-16293)

  - ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS     (CVE-2020-16294)

  - ghostscript: NULL pointer dereference in clj_media_size() in devices/gdevclj.c could result in a DoS     (CVE-2020-16295)

  - ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS     (CVE-2020-16296)

  - ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS     (CVE-2020-16297)

  - ghostscript: buffer overflow in mj_color_correct() in contrib/japanese/gdevmjc.c could result in a DoS     (CVE-2020-16298)

  - ghostscript: division by zero in bj10v_print_page() in contrib/japanese/gdev10v.c could result in a DoS     (CVE-2020-16299)

  - ghostscript: buffer overflow in tiff12_print_page() in devices/gdevtfnx.c could result in a DoS     (CVE-2020-16300)

  - ghostscript: buffer overflow in okiibm_print_page1() in devices/gdevokii.c could result in a DoS     (CVE-2020-16301)

  - ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege     escalation (CVE-2020-16302)

  - ghostscript: use-after-free in xps_finish_image_path() in devices/vector/gdevxps.c could result in a     privilege escalation (CVE-2020-16303)

  - ghostscript: buffer overflow in image_render_color_thresh() in base/gxicolor.c could result in a DoS     (CVE-2020-16304)

  - ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS     (CVE-2020-16305)

  - ghostscript: NULL pointer dereference in devices/gdevtsep.c could result in a DoS (CVE-2020-16306)

  - ghostscript: NULL pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS     (CVE-2020-16307)

  - ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS     (CVE-2020-16308)

  - ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS     (CVE-2020-16309)

  - ghostscript: division by zero in dot24_print_page() in devices/gdevdm24.c could result in a DoS     (CVE-2020-16310)

  - ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS     (CVE-2020-17538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

遠端主機上安裝的 ghostscript 版本是 8.70-24.33 之前版本。因此，它受到 ALAS-2023-1867 公告中提及的一個弱點影響。

  - 在 Artifex Software GhostScript v9.50 中，devices/gdevepsc.c 的 epsc_print_page() 中存在緩衝區溢位弱點，遠端攻擊者可利用此弱點，透過精心建構的 PDF 檔案造成拒絕服務。此問題已在 v9.51 版本中修正。(CVE-2020-16294)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Windows 主機上安裝的 Artifex Ghostscript 版本為 9.50。因此受到多個弱點影響：

  - 在 Artifex Software GhostScript v9.50 中，遠端攻擊者可利用 devices/gdev3852.c 的 jetp3852_print_page() 中的緩衝區溢位弱點，透過精心建構的 PDF 檔案提升權限。(CVE-2020-16302)

  - 在 Artifex Software GhostScript v9.50 中，遠端攻擊者可利用 devices/vector/gdevxps.c 的 xps_finish_image_path() 中的釋放後使用弱點，透過精心建構的 PDF 檔案提升權限。(CVE-2020-16303)

  - 在 Artifex Software GhostScript v9.50 中，遠端攻擊者可利用 base/gxicolor.c 的 image_render_color_thresh() 中的緩衝區溢位弱點，透過精心建構的 eps 檔案提升權限。(CVE-2020-16304)

此外，安裝的 Artifex Ghostscript 版本受到多個緩衝區溢位弱點影響，攻擊者可藉此透過精心建構的檔案造成拒絕服務。

據發現，Ghostscript 未正確處理某些文件檔案。如果使用者或自動化系統遭誘騙而處理特製的檔案，遠端攻擊者就可利用此問題而造成 Ghostscript 損毀，進而導致拒絕服務，或可能執行任意程式碼。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前述描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

在 Ghostscript (GPL PostScript/PDF 解譯器) 中發現數個安全性弱點，如果處理格式錯誤的文件檔案，這些弱點可導致拒絕服務，並可能造成任意程式碼執行。

ID	名稱	產品	系列	已發布	已更新	嚴重性
149766	CentOS 8 : ghostscript (CESA-2021:1852)	Nessus	CentOS Local Security Checks	2021/5/19	2023/12/29	high
183844	Amazon Linux AMI：ghostscript (ALAS-2023-1867)	Nessus	Amazon Linux Local Security Checks	2023/10/25	2024/12/11	medium
139748	Artifex Ghostscript 9.50 多個弱點	Nessus	Windows	2020/8/21	2024/2/23	high
139782	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS：Ghostscript 弱點 (USN-4469-1)	Nessus	Ubuntu Local Security Checks	2020/8/25	2024/8/27	high
139812	Debian DSA-4748-1：ghostscript - 安全性更新	Nessus	Debian Local Security Checks	2020/8/26	2024/2/23	high

偵測

搜尋 Plugin

high

medium

high

high

high