漏洞信息详情

Artifex Software Ghostscript 缓冲区错误漏洞

  • CNNVD编号:CNNVD-201808-903
  • 危害等级: 高危
  • CVE编号: CVE-2018-15911
  • 漏洞类型: 缓冲区错误
  • 发布时间: 2018-08-29
  • 威胁类型: 本地
  • 更新时间: 2020-08-25
  • 厂        商: debian
  • 漏洞来源: Tavis Ormandy (tav...

漏洞简介

Artifex Software Ghostscript是美国Artifex Software公司的一款开源的PostScript(一种用于电子产业和桌面出版领域的页面描述语言和编程语言)解析器。该产品可显示Postscript文件以及在非Postscript打印机上打印Postscript文件。

Artifex Software Ghostscript 2018-08-24之前的9.23版本中存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时,未正确验证数据边界,导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

漏洞公告

目前厂商已发布升级补丁以修复漏洞,补丁获取链接:

http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=8e9ce5016db968b40e4ec255a3005f2786cce45f

参考网址

来源:CONFIRM

链接:https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101

来源:MISC

链接:https://bugs.ghostscript.com/show_bug.cgi?id=699665

来源:BID

链接:https://www.securityfocus.com/bid/105122

来源:CONFIRM

链接:https://support.f5.com/csp/article/K22141757?utm_source=f5support&utm_medium=RSS

来源:MISC

链接:https://www.kb.cert.org/vuls/id/332928

来源:BID

链接:http://www.securityfocus.com/bid/105122

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html

来源:www.synology.com

链接:https://www.synology.com/en-global/support/security/Synology_SA_18_49

来源:www.oracle.com

链接:https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2018-5142979.html

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2018-16509#

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2018-15910

来源:bugzilla.redhat.com

链接:https://bugzilla.redhat.com/show_bug.cgi?id=1619748

来源:seclists.org

链接:https://seclists.org/oss-sec/2018/q3/142

来源:www.ghostscript.com

链接:http://www.ghostscript.com/

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2018-15911

来源:blog.cube-soft.jp

链接:https://blog.cube-soft.jp/?p=1752

来源:bugzilla.redhat.com

链接:https://bugzilla.redhat.com/show_bug.cgi?id=1625832

来源:bugzilla.redhat.com

链接:https://bugzilla.redhat.com/show_bug.cgi?id=1619751

来源:bugs.chromium.org

链接:https://bugs.chromium.org/p/project-zero/issues/detail?id=1640&can=1&q=&sort=-modified%20-id&colspec=ID%20Status%20Owner%20Summary%20Modified%20CVE

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2018:3834

来源:MISC

链接:http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=8e9ce5016db968b40e4ec255a3005f2786cce45f

来源:DEBIAN

链接:https://www.debian.org/security/2018/dsa-4288

来源:GENTOO

链接:https://security.gentoo.org/glsa/201811-12

来源:UBUNTU

链接:https://usn.ubuntu.com/3768-1/

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10794373

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10869078

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10792175

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10870872

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10794743

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10871830

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10791547

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10871626

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10871786

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10794307

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10870068

来源:www.ibm.com

链接:http://www.ibm.com/support/docview.wss?uid=ibm10791549

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/76454

来源:www.nsfocus.net

链接:http://www.nsfocus.net/vulndb/43216

来源:www.securityfocus.com

链接:https://www.securityfocus.com/bid/105122

漏洞信息快速查询

相关漏洞

更多