According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)

    An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer     overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)

    An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer     overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)

Tenable has extracted the preceding description block directly from the EulerOS ghostscript security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7593 advisory.

    - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow
    - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color     Space
    - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
    - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
    - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in     Ghostscript

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0256 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-27836:
    An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer     overflow in contrib/japanese/gdev10v.c.

    CVE-2025-27835:
    An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c.

    CVE-2025-27834:
    An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized     Type 4 function in a PDF document to pdf/pdf_func.c.

    CVE-2025-27833:
    An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF     font name to pdf/pdf_fmap.c.

    CVE-2025-27832:
    An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer     overflow for contrib/japanese/gdevnpdl.c.

    CVE-2025-27831:
    An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text     buffer overflow via long characters to devices/vector/doc_common.c.

    CVE-2025-27830:
    An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during     serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0453 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-27832:
    An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer     overflow for contrib/japanese/gdevnpdl.c.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21915 advisory.

    The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript     translates PostScript code to common bitmap formats so that the code can be displayed or printed.

    Security Fix(es):

    * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9988:02 advisory.

    * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10481:04 advisory.

    * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5888 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5888-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     March 26, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : ghostscript     CVE ID         : CVE-2025-27830 CVE-2025-27831 CVE-2025-27832 CVE-2025-27833                      CVE-2025-27834 CVE-2025-27835 CVE-2025-27836

    Multiple security issues were discovered in Ghostscript, the GPL     PostScript/PDF interpreter, which could result in denial of service and     potentially the execution of arbitrary code if malformed document files     are processed.

    For the stable distribution (bookworm), these problems have been fixed in     version 10.0.0~dfsg-11+deb12u7.

    We recommend that you upgrade your ghostscript packages.

    For the detailed security status of ghostscript please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/ghostscript

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984676 advisory.

    An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer     overflow for contrib/japanese/gdevnpdl.c.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7623-1 advisory.

    It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a     user or system were tricked into opening a specially crafted file, an attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
    (CVE-2023-39327)

    Thomas Rinsma discovered that Ghostscript did not correctly handle printing certain variables. An attacker     could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and     Ubuntu 18.04 LTS. (CVE-2024-29508)

    It was discovered that Ghostscript did not correctly handle loading certain libraries. An attacker could     possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS.
    (CVE-2024-33871)

    It was discovered that Ghostscript did not correctly handle certain memory operations. An attacker could     possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu     18.04 LTS. (CVE-2024-56826, CVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836)

    Vasileios Flengas discovered that Ghostscript did not correctly handle argument sanitization. An attacker     could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS,     Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0077 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-46751:
    An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through     10.02.0 allows remote attackers to crash the application via a dangling pointer.

    CVE-2024-46951:
    An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation     pointer in Pattern color space could lead to arbitrary code execution.

    CVE-2024-46952:
    An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer     overflow during handling of a PDF XRef stream (related to W array values).

    CVE-2024-46953:
    An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when     parsing the filename format string (for the output filename) results in path truncation, and possible path     traversal and code execution.

    CVE-2024-46954:
    An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong     UTF-8 encoding leads to possible ../ directory traversal.

    CVE-2024-46956:
    An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in     filenameforall can lead to arbitrary code execution.

    CVE-2025-27832:
    An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer     overflow for contrib/japanese/gdevnpdl.c.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
235774	EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2025-1511)	Nessus	Huawei Local Security Checks	2025/5/12	2026/1/21	critical
240961	Oracle Linux 10 : ghostscript (ELSA-2025-7593)	Nessus	Oracle Linux Local Security Checks	2025/6/30	2026/1/21	critical
276152	TencentOS Server 4: ghostscript (TSSA-2025:0256)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	critical
276410	TencentOS Server 3: ghostscript (TSSA-2025:0453)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	critical
276588	RHEL 9 : ghostscript (RHSA-2025:21915)	Nessus	Red Hat Local Security Checks	2025/11/24	2025/11/24	critical
282773	MiracleLinux 8 : ghostscript-9.27-17.el8_10 (AXSA:2025-9988:02)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	critical
283297	MiracleLinux 9 : ghostscript-9.54.0-19.el9_6 (AXSA:2025-10481:04)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	critical
233372	Debian dsa-5888 : ghostscript - security update	Nessus	Debian Local Security Checks	2025/3/26	2026/1/21	critical
267207	Unity Linux 20.1070a Security Update: ghostscript (UTSA-2025-984676)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/10	critical
241623	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Ghostscript vulnerabilities (USN-7623-1)	Nessus	Ubuntu Local Security Checks	2025/7/9	2026/1/21	low
237277	Alibaba Cloud Linux 3 : 0077: ghostscript (ALINUX3-SA-2025:0077)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/27	2025/5/27	high

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

low

high