Headline
Ubuntu Security Notice USN-5618-1
Ubuntu Security Notice 5618-1 - It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash.
==========================================================================Ubuntu Security Notice USN-5618-1September 20, 2022ghostscript vulnerability==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 16.04 ESMSummary:Ghostscript could be made to crash if it opened a specially crafted.Software Description:- ghostscript: PostScript and PDF interpreterDetails:It was discovered the Ghostscript incorrectly handled memory whenprocessing certain inputs. By tricking a user into opening a speciallycrafted PDF file, an attacker could cause the program to crash.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 16.04 ESM: ghostscript 9.26~dfsg+0-0ubuntu0.16.04.14+esm4 ghostscript-x 9.26~dfsg+0-0ubuntu0.16.04.14+esm4 libgs9 9.26~dfsg+0-0ubuntu0.16.04.14+esm4In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-5618-1 CVE-2020-27792Related news
Ubuntu Security Notice 5643-1 - It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to cause GhostScript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to cause GhostScript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS.
A heap-based buffer over write vulnerability was found in GhostScript's lp8000_print_page() function in gdevlp8k.c file. An attacker could trick a user to open a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.