| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | ≤ 9.23 | |
| gpl ghostscript | < 9.26 | 9.26 |
| pulse connect secure | ≥ 8.2r1.0, < 8.2r12.1≥ 8.3r1, < 8.3r7.1≥ 9.0r1, < 9.0r3.4 | 8.2r12.18.3r7.19.0r3.4 |
In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free