The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3890 advisory.

    [9.25-5.1]
    - 1769342 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of ghostscript installed on the remote host is prior to 9.25-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1598 advisory.

    Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by     remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to     inject code. (CVE-2018-17183)

    Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors     involving errorhandler setup. NOTE: this issue exists because of an incomplete fix forCVE-2018-17183.
    (CVE-2018-17961)

    Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of     system operators in the saved execution stack in an error object. (CVE-2018-18073)

    Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors     involving the 1Policy operator. (CVE-2018-18284)

    In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A     specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute     arbitrary code in the context of the Ghostscript process. This is a type confusion issue because of     failure to check whether the Implementation of a pattern dictionary was a structure type. (CVE-2018-19134)

    An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if     another device is used. (CVE-2018-19409)

    psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access     restrictions because available stack space is not checked when the device remains the same.
    (CVE-2018-19475)

    psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access     restrictions because of a setcolorspace type confusion. (CVE-2018-19476)

    psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access     restrictions because of a JBIG2Decode type confusion. (CVE-2018-19477)

    A flaw was found in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged     calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could     disable security protection and then have access to the file system, or execute arbitrary commands.
    (CVE-2019-14811)

    A flaw was found in the .setuserparams2 procedure where it did not properly secure its privileged calls,     enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable     security protection and then have access to the file system, or execute arbitrary commands.
    (CVE-2019-14812)

    A flaw was found in the setsystemparams procedure where it did not properly secure its privileged calls,     enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable     security protection and then have access to the file system, or execute arbitrary commands.
    (CVE-2019-14813)

    A flaw was found in the .pdfexectoken and other procedures where it did not properly secure its privileged     calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could     disable security protection and then have access to the file system, or execute arbitrary commands.
    (CVE-2019-14817)

    A flaw was found in the `.charkeys` procedure, where it did not properly secure its privileged calls,     enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a     specially crafted PostScript file that could escalate privileges within the Ghostscript and access files     outside of restricted areas or execute commands. (CVE-2019-14869)

    It was found that the superexec operator was available in the internal dictionary.  A specially crafted     PostScript file could use this flaw in order to, for example, have access to the file system outside of     the constrains imposed by -dSAFER. (CVE-2019-3835)

    It was found that the forceput operator could be extracted from the DefineResource method. A specially     crafted PostScript file could use this flaw in order to, for example, have access to the file system     outside of the constrains imposed by -dSAFER. (CVE-2019-3838)

    It was found that some privileged operators remained accessible from various places after     theCVE-2019-6116fix. A specially crafted PostScript file could use this flaw in order to, for example,     have access to the file system outside of the constrains imposed by -dSAFER. (CVE-2019-3839)

    It was found that ghostscript could leak sensitive operators on the operand stack when a pseudo-operator     pushes a subroutine. A specially crafted PostScript file could use this flaw to escape the -dSAFER     protection in order to, for example, have access to the file system outside of the SAFER constraints.
    (CVE-2019-6116)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端 Redhat Enterprise Linux 7 主機已安裝受到一個弱點影響的套件，如 RHSA-2019:3888 公告中所提及。

  - ghostscript：.charkeys 中存在 -dSAFER 逸出 (701841) (CVE-2019-14869)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2019:3890 公告中提及的弱點影響。

  - ghostscript：.charkeys 中存在 -dSAFER 逸出 (701841) (CVE-2019-14869)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

來自 Red Hat 安全性公告 2019:3890： 現已提供適用於 Red Hat Enterprise Linux 8 的 ghostscript 更新。 Red Hat 產品安全性團隊已將此更新評等為具有重要安全性影響。可從〈參照〉一節的 CVE 連結中取得每個弱點之常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。 Ghostscript 套件含有用於轉譯 PostScript 和 PDF 文件的公用程式。Ghostscript 可將 PostScript 程式碼轉譯為常見的點陣圖格式，以便於顯示或列印程式碼。 安全性修正： * ghostscript：.charkeys 中存在 -dSAFER 逸出 (701841) (CVE-2019-14869) 如需安全性問題的詳細資料，包括影響、CVSS 分數、確認及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

遠端主機上安裝的 ghostscript 版本是 9.25-5 之前版本。因此，會受到 ALAS2-2021-1598 公告中所提及的多個弱點影響。

  - 9.25 之前的 Artifex Ghostscript 允許使用可由使用者寫入的錯誤例外表，可提供特製 PostScript 的遠端攻擊者可惡意利用此弱點覆寫或置換錯誤處理常式，以插入程式碼。(CVE-2018-17183)

  - Artifex Ghostscript 9.25 及更舊版本讓攻擊者得以透過涉及錯誤處理程式設定的向量來繞過沙箱保護機制。注意：此問題之所以存在，是因為 CVE-2018-17183 的修正不完整。
    (CVE-2018-17961)

  - Artifex Ghostscript 可讓攻擊者藉由公開儲存在錯誤物件中的執行堆疊的系統運算子來繞過沙箱保護機制。(CVE-2018-18073)

  Artifex Ghostscript 9.25 及更舊版本讓攻擊者得以透過涉及 1Policy 運算子的向量來繞過沙箱保護機制。(CVE-2018-18284)

  - 在 9.25 之前的 Artifex Ghostscript 中，setpattern 運算子未正確驗證某些類型。特製的 PostScript 文件可惡意利用此弱點來損毀 ghostscript，或可能在 ghostscript 處理序的內容中執行任意程式碼。這是一個類型混淆問題，是因為未檢查模式字典的實作是否屬於結構類型所致。(CVE-2018-19134)

  - 在 Artifex Ghostscript 9.26 之前的版本中發現一個問題。如果使用另一個裝置，則未正確檢查 LockSafetyParams。(CVE-2018-19409)

  - 在 9.26 版之前的 Artifex Ghostscript 中，psi/zdevice2.c 允許遠端攻擊者繞過預定的存取限制，這是因為裝置維持不變時沒有檢查可用的堆疊空間所致。
    (CVE-2018-19475)

  - 在 9.26 版之前的 Artifex Ghostscript 中，psi/zicc.c 允許遠端攻擊者繞過預定的存取限制，這是因為 setcolorspace 類型混淆所致。(CVE-2018-19476)

  - 在 9.26 版之前的 Artifex Ghostscript 中，psi/zfjbig2.c 允許遠端攻擊者繞過預定的存取限制，這是因為 JBIG2Decode 類型混淆所致。(CVE-2018-19477)

  在 9.50 之前的 ghostscript 版本中發現一個缺陷，此缺陷導致 .pdf_hook_DSC_Creator 程序未能正確保護其具權限的呼叫，指令碼因而得以繞過「-dSAFER」限制。特製的 PostScript 檔案可停用安全保護機制，進而存取檔案系統或執行任意命令。 (CVE-2019-14811)

  - 在 ghostscript 9.x 的 9.50 之前版本中發現一個缺陷，此缺陷導致  .setuserparams2 程序未能正確保護其具權限的呼叫，指令碼因而得以繞過「-dSAFER」限制。特製的 PostScript 檔案可停用安全保護機制，進而存取檔案系統或執行任意命令。 (CVE-2019-14812)

  - 在 ghostscript 9.50 之前的 9.x 版中發現一個缺陷，此缺陷導致 setsystemparams 程序未能正確保護其具權限的呼叫，指令碼因而得以繞過「-dSAFER」限制。特製的 PostScript 檔案可停用安全保護機制，進而存取檔案系統或執行任意命令。 (CVE-2019-14813)

  在 9.50 之前的 ghostscript 版本中發現一個缺陷，此缺陷導致 .pdfexectoken 和其他程序未能正確保護其具權限的呼叫，指令碼因而得以繞過「-dSAFER」限制。特製的 PostScript 檔案可停用安全保護機制，進而存取檔案系統或執行任意命令。 (CVE-2019-14817)

  - 在 ghostscript 9.x 的 9.50 之前版本中發現一個缺陷，此缺陷導致「.charkeys」程序未能正確保護其具權限的呼叫，指令碼因而得以繞過「-dSAFER」限制。攻擊者可透過建立特製的 PostScript 檔案來濫用此瑕疵，提升其在 Ghostscript 中的權限，並存取受限區域之外的檔案或執行命令。
    (CVE-2019-14869)

  - 在 ghostscript 9.27 之前版本中，發現內部字典中有可用的 superexec 運算子。特製的 PostScript 檔案可利用此缺陷，在 -dSAFER 所設限制之外存取檔案系統。(CVE-2019-3835)

  - 據發現，在 ghostscript 9.27 之前版本中，可以從 DefineResource 方法擷取 forceput 運算子。特製的 PostScript 檔案可利用此缺陷，在 -dSAFER 所設限制之外存取檔案系統。(CVE-2019-3838)

  - 據發現，在 CVE-2019-6116 修正後，在 ghostscript 中仍可從不同位置存取某些有權限的運算子。特製的 PostScript 檔案可利用此缺陷，例如，以在 -dSAFER 所設限制之外存取檔案系統。Ghostscript 9.27 之前版本容易受到影響。(CVE-2019-3839)

  - 在 Artifex Ghostscript 9.26 及之前的所有版本中，暫時性程序可允許使用者存取系統運算子，進而導致遠端程式碼執行。(CVE-2019-6116)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

远程 Redhat Enterprise Linux 7 主机上安装的程序包受到 RHSA-2019:3888 公告中提及的漏洞的影响。

  - ghostscript：.charkeys 中存在 -dSAFER 逃逸 (701841) (CVE-2019-14869)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2019:3890 公告中提及的漏洞的影响。

  - ghostscript：.charkeys 中存在 -dSAFER 逃逸 (701841) (CVE-2019-14869)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

来自 Red Hat 安全公告 2019:3890： ghostscript 的更新现在可用于 Red Hat Enterprise Linux 8。 Red Hat 产品安全团队将此更新评级为具有重要安全影响。可从“参考”部分中的 CVE 链接获取通用漏洞评分系统 (CVSS) 基本分数，其针对每个漏洞给出了详细的严重性等级。 Ghostscript 套件包含用于渲染 PostScript 和 PDF 文档的实用工具。Ghostscript 可将 PostScript 代码转换成通用 bitmap 格式，使代码可以显示或打印。 安全补丁： * ghostscript：.charkeys 中存在 -dSAFER 逃逸 (701841) (CVE-2019-14869) 有关此安全问题的详细信息，包括其影响、CVSS 分数、致谢和其他相关信息，请参阅列于“参考”部分的 CVE 页面。

远程主机上安装的 ghostscript 版本低于 9.25-5。因此，如公告 ALAS2-2021-1598 所述，该主机受到多个漏洞的影响。

  - Artifex Ghostscript 9.25 之前的版本允许用户写入的错误异常表，能够提供构建 PostScript 的远程攻击者可加以利用，进而可能覆盖或取代错误处理程序，以注入代码。(CVE-2018-17183)

  - Artifex Ghostscript 9.25 及更早版本允许攻击者通过涉及错误处理器设置的向量绕过沙盒保护机制。注意：此问题是因对 CVE-2018-17183 的修复不完整所致。
    (CVE-2018-17961)

  - Artifex Ghostscript 允许攻击者利用错误对象中已保存执行堆栈的系统运算符的暴露，绕过沙盒保护机制。(CVE-2018-18073)

  - Artifex Ghostscript 9.25 及更早版本允许攻击者通过涉及 1Policy 运算符的向量绕过沙盒保护机制。(CVE-2018-18284)

  - 在 Artifex Ghostscript 9.25 及其之前的版本中，setpattern 运算符未能正确验证某些类型。特别构建的 PostScript 文档可利用此问题造成 Ghostscript 崩溃，或在 Ghostscript 进程环境中执行任意代码。这是一种类型混淆问题，是未检查模式字典的实现是否属于结构类型所致。(CVE-2018-19134)

  - 在 Artifex Ghostscript 9.26 之前的版本中发现问题。如果使用另一设备，则不能正确检查 LockSafetyParams。(CVE-2018-19409)

  - Artifex Ghostscript 9.26 之前的版本中的 psi/zdevice2.c 可让远程攻击者绕过预期访问限制，这是在设备保持不变的情况下，未检查可用的堆栈空间所致。
    (CVE-2018-19475)

  - Artifex Ghostscript 9.26 之前的版本中的 psi/zicc.c 可让远程攻击者绕过预期访问限制，这是 setcolorspace 类型混淆所致。(CVE-2018-19476)

  - Artifex Ghostscript 9.26 之前的版本中的 psi/zfjbig2.c 可让远程攻击者绕过预期访问限制，这是 JBIG2Decode 类型混淆所致。(CVE-2018-19477)

  - 在 ghostscript 9.50 之前的版本中，在 .pdf_hook_DSC_Creator 程序中发现缺陷，其中未正确保护其特权调用，允许脚本绕过“-dSAFER”限制。特别构建的 PostScript 文件可禁用安全保护，随后可访问文件系统，或执行任意命令。(CVE-2019-14811)

  - 在 ghostscript 9.50 之前的所有 9.x 版本中，在 .setuserparams2 程序中发现缺陷，其中未正确保护其特权调用，允许脚本绕过“-dSAFER”限制。特别构建的 PostScript 文件可禁用安全保护，随后可访问文件系统，或执行任意命令。(CVE-2019-14812)

  - 在 ghostscript 9.50 之前的版本 9.x 中，在 setsystemparams 程序中发现缺陷，其中未正确保护其特权调用，允许脚本绕过“-dSAFER”限制。特别构建的 PostScript 文件可禁用安全保护，随后可访问文件系统，或执行任意命令。(CVE-2019-14813)

  在 ghostscript 9.50 之前的版本中，在 .pdfexectoken 和其他程序中发现缺陷，其中未正确保护其特权调用，允许脚本绕过“-dSAFER”限制。特别构建的 PostScript 文件可禁用安全保护，随后可访问文件系统，或执行任意命令。(CVE-2019-14817)

  - 在 ghostscript 9.50 之前的所有 9.x 版本中，在“.charkeys”程序发现缺陷，其中未正确保护其特权调用，允许脚本绕过“-dSAFER”限制。攻击者可通过创建特别构建的 PostScript 文件来滥用此缺陷，该文件可在 Ghostscript 中提升权限、访问受限制区域之外的文件，或执行命令。
    (CVE-2019-14869)

  - 据发现，在 ghostscript 9.27 之前的版本中，superexec 运算符可在内部目录中使用。特别构建的 PostScript 文件可利用此缺陷，访问 -dSAFER 施加的限制之外的文件系统（示例）。(CVE-2019-3835)

  - 据发现，在 ghostscript 9.27 之前的版本中，forceput 运算符可从 DefineResource 方法中提取 。特别构建的 PostScript 文件可利用此缺陷，访问 -dSAFER 施加的限制之外的文件系统（示例）。(CVE-2019-3838)

  - 据发现，在 CVE-2019-6116 补丁之后，仍可以从不同位置访问 ghostscript 的一些特权运算符。特制的 PostScript 文件可利用此缺陷访问 -dSAFER 施加的限制之外的文件系统（示例）。Ghostscript 9.27 之前的版本容易受到攻击。(CVE-2019-3839)

  - 在 Artifex Ghostscript 9.26 及之前的版本中，ephemeral 或 transient 程序可允许访问系统运算符，进而可导致远程代码执行。(CVE-2019-6116)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

An update for ghostscript is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es) :

* ghostscript: -dSAFER escape in .charkeys (701841) (CVE-2019-14869)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Manfred Paul and Lukas Schauer reported that the .charkeys procedure in Ghostscript, the GPL PostScript/PDF interpreter, does not properly restrict privileged calls, which could result in bypass of file system restrictions of the dSAFER sandbox.

For Debian 8 'Jessie', this problem has been fixed in version 9.26a~dfsg-0+deb8u6.

We recommend that you upgrade your ghostscript packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ghostscript fixes the following issues :

  - CVE-2019-14869: Fixed a possible dSAFER escape which     could have allowed an attacker to gain high privileges     by a specially crafted Postscript code (bsc#1156275).
    This update was imported from the SUSE:SLE-15:Update     update project.

Security fix for CVE-2019-14869

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ghostscript packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - A flaw was found in all versions of ghostscript 9.x     before 9.50, where the `.charkeys` procedure, where it     did not properly secure its privileged calls, enabling     scripts to bypass `-dSAFER` restrictions. An attacker     could abuse this flaw by creating a specially crafted     PostScript file that could escalate privileges within     the Ghostscript and access files outside of restricted     areas or execute commands.(CVE-2019-14869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0222 advisory.

    The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript     translates PostScript code to common bitmap formats so that the code can be displayed or printed.

    Security Fix(es):

    * ghostscript: -dSAFER escape in .charkeys (701841) (CVE-2019-14869)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ghostscript packages installed that are affected by a vulnerability:

  - A flaw was found in all versions of ghostscript 9.x     before 9.50, where the `.charkeys` procedure, where it     did not properly secure its privileged calls, enabling     scripts to bypass `-dSAFER` restrictions. An attacker     could abuse this flaw by creating a specially crafted     PostScript file that could escalate privileges within     the Ghostscript and access files outside of restricted     areas or execute commands. (CVE-2019-14869)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for ghostscript is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es) :

* ghostscript: -dSAFER escape in .charkeys (701841) (CVE-2019-14869)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
131274	Oracle Linux 8 : ghostscript (ELSA-2019-3890)	Nessus	Oracle Linux Local Security Checks	2019/11/25	2024/10/22	high
146633	Amazon Linux 2 : ghostscript (ALAS-2021-1598)	Nessus	Amazon Linux Local Security Checks	2021/2/19	2024/12/11	critical
131051	RHEL 7：ghostscript (RHSA-2019:3888)	Nessus	Red Hat Local Security Checks	2019/11/15	2024/11/7	high
131053	RHEL 8：ghostscript (RHSA-2019:3890)	Nessus	Red Hat Local Security Checks	2019/11/15	2024/11/6	high
131274	Oracle Linux 8 : ghostscript (ELSA-2019-3890)	Nessus	Oracle Linux Local Security Checks	2019/11/25	2024/10/22	high
146633	Amazon Linux 2：ghostscript (ALAS-2021-1598)	Nessus	Amazon Linux Local Security Checks	2021/2/19	2024/12/11	critical
131051	RHEL 7：ghostscript (RHSA-2019:3888)	Nessus	Red Hat Local Security Checks	2019/11/15	2024/11/7	high
131053	RHEL 8：ghostscript (RHSA-2019:3890)	Nessus	Red Hat Local Security Checks	2019/11/15	2024/11/6	high
131274	Oracle Linux 8 : ghostscript (ELSA-2019-3890)	Nessus	Oracle Linux Local Security Checks	2019/11/25	2024/10/22	high
146633	Amazon Linux 2：ghostscript (ALAS-2021-1598)	Nessus	Amazon Linux Local Security Checks	2021/2/19	2024/12/11	critical
144019	Virtuozzo 7 : ghostscript / ghostscript-cups / ghostscript-doc / etc (VZLSA-2019-3888)	Nessus	Virtuozzo Local Security Checks	2020/12/10	2024/2/2	high
131035	Debian DLA-1992-1 : ghostscript security update	Nessus	Debian Local Security Checks	2019/11/15	2021/1/11	high
131179	openSUSE Security Update : ghostscript (openSUSE-2019-2534)	Nessus	SuSE Local Security Checks	2019/11/21	2024/4/10	high
131256	Fedora 29 : ghostscript (2019-7debdd1807)	Nessus	Fedora Local Security Checks	2019/11/25	2024/4/10	high
132813	EulerOS Virtualization for ARM 64 3.0.5.0 : ghostscript (EulerOS-SA-2020-1059)	Nessus	Huawei Local Security Checks	2020/1/13	2024/4/1	high
133223	RHEL 8 : ghostscript (RHSA-2020:0222)	Nessus	Red Hat Local Security Checks	2020/1/24	2024/11/7	high
133083	NewStart CGSL CORE 5.05 / MAIN 5.05 : ghostscript Vulnerability (NS-SA-2020-0007)	Nessus	NewStart CGSL Local Security Checks	2020/1/20	2021/1/14	high
131569	CentOS 7 : ghostscript (CESA-2019:3888)	Nessus	CentOS Local Security Checks	2019/12/4	2019/12/31	high

检测

插件搜索

high

critical

high

high

high

critical

high

high

high

critical

high

high

high

high

high

high

high

high