The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1118-1 advisory.

    - CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to     devices/vector/doc_common.c (bsc#1240075)
      - CVE-2025-27832: Fixed compression buffer overflow in NPDL device for contrib/japanese/gdevnpdl.c     (bsc#1240077)
      - CVE-2025-27835: Fixed buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c     (bsc#1240080)
      - CVE-2025-27836: Fixed Print buffer overflow in BJ10V device in contrib/japanese/gdev10v.c     (bsc#1240081)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4118 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4118-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     April 07, 2025                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : ghostscript     Version        : 9.53.3~dfsg-7+deb11u10     CVE ID         : CVE-2025-27830 CVE-2025-27831 CVE-2025-27832 CVE-2025-27835                      CVE-2025-27836

    Multiple vulnerabilities have been fixed in the PostScript/PDF     interpreter Ghostscript.

    CVE-2025-27830

        Buffer overflow via serialization of DollarBlend

    CVE-2025-27831

        Unicode decoding overrun

    CVE-2025-27832

        Integer overflow leading to buffer overflow

    CVE-2025-27835

        Confusion between bytes and shorts

    CVE-2025-27836

        Buffer overflow in bj10v device

    For Debian 11 bullseye, these problems have been fixed in version     9.53.3~dfsg-7+deb11u10.

    We recommend that you upgrade your ghostscript packages.

    For the detailed security status of ghostscript please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/ghostscript

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)

    An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer     overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)

    An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer     overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)

Tenable has extracted the preceding description block directly from the EulerOS ghostscript security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775210556 advisory.

  - An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during     serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c. (CVE-2025-27830)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text     buffer overflow via long characters to devices/vector/doc_common.c. (CVE-2025-27831)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c. (CVE-2025-27835)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer     overflow in contrib/japanese/gdev10v.c. (CVE-2025-27836)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202508-02 (GPL Ghostscript: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers     referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c. (CVE-2025-27835)

Note that Nessus relies on the presence of the package as reported by the vendor.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775120182 advisory.

  - An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during     serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c. (CVE-2025-27830)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text     buffer overflow via long characters to devices/vector/doc_common.c. (CVE-2025-27831)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c. (CVE-2025-27835)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer     overflow in contrib/japanese/gdev10v.c. (CVE-2025-27836)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of ghostscript installed on the remote host is prior to 9.54.0-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2820 advisory.

    Fix confusion between bytes and shorts. Data is being copied from a string in multiple of shorts, rather     than multiple of bytes, leading to both a read (probably benign, given the memory manager) and write     buffer overflow.

    Info: https://bugs.ghostscript.com/show_bug.cgi?id=708131Patch: https://cgit.ghostscript.com/cgi-     bin/cgit.cgi/ghostpdl.git/commit/?id=de900010a6f2310d1fd54e99eeba466693da0e13 (ghostpdl-10.05.0)     (CVE-2025-27835)

    Potential print buffer overflow. Fixed in ghostpdl-10.05.0 by implementing stricter buffer length     validation.

    Info: https://bugs.ghostscript.com/show_bug.cgi?id=708192Patch: https://cgit.ghostscript.com/cgi-     bin/cgit.cgi/ghostpdl.git/commit/?id=8b6d19b2b4079da6863ef25f2370f25d4b054919 (ghostpdl-10.05.0)     (CVE-2025-27836)

    Patch to error check UTF-8 conversions. Fixed in ghostpdl-10.05.0 by adding a check on the value returned     by the gp_utf8_to_uint16 function.

    Info: https://bugs.ghostscript.com/show_bug.cgi?id=708238Patch: https://cgit.ghostscript.com/cgi-     bin/cgit.cgi/ghostpdl.git/commit/?id=dbb9f2b11f820697e77863523a8d835ab040e5d1 (ghostpdl-10.05.0)     (CVE-2025-27837)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
233800	SUSE SLES12 Security Update : ghostscript (SUSE-SU-2025:1118-1)	Nessus	SuSE Local Security Checks	2025/4/3	2026/1/21	critical
233980	Debian dla-4118 : ghostscript - security update	Nessus	Debian Local Security Checks	2025/4/7	2026/1/21	critical
235745	EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2025-1510)	Nessus	Huawei Local Security Checks	2025/5/12	2026/1/21	critical
351858	Rocky Linux 9.6 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775210556)	Nessus	Rocky Linux Local Security Checks	2026/9/30	2026/9/30	critical
243974	GLSA-202508-02 : GPL Ghostscript: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2025/8/6	2025/8/6	critical
260289	Linux Distros Unpatched Vulnerability : CVE-2025-27835	Nessus	Misc.	2025/9/2	2026/9/2	high
362274	AlmaLinux 9.2 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1775120182)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	critical
234521	Amazon Linux 2 : ghostscript (ALAS-2025-2820)	Nessus	Amazon Linux Local Security Checks	2025/4/17	2026/1/21	critical

检测

插件搜索

critical

critical

critical

critical

critical

high

critical

critical