A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per pixel. For bpp > 64, memxdevice is used and does not have an initdeviceprocs defined. This flaw allows an attacker to parse a large number of bits (more than 64 bits per pixel), which triggers a NULL pointer dereference flaw, causing an application to crash.
{ "binaries": [ { "binary_name": "ghostscript", "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.16" }, { "binary_name": "ghostscript-dbg", "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.16" }, { "binary_name": "ghostscript-doc", "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.16" }, { "binary_name": "ghostscript-x", "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.16" }, { "binary_name": "libgs-dev", "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.16" }, { "binary_name": "libgs9", "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.16" }, { "binary_name": "libgs9-common", "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.16" } ], "ubuntu_priority": "low", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "ghostscript", "binary_version": "9.50~dfsg-5ubuntu4.5" }, { "binary_name": "ghostscript-dbg", "binary_version": "9.50~dfsg-5ubuntu4.5" }, { "binary_name": "ghostscript-doc", "binary_version": "9.50~dfsg-5ubuntu4.5" }, { "binary_name": "ghostscript-x", "binary_version": "9.50~dfsg-5ubuntu4.5" }, { "binary_name": "libgs-dev", "binary_version": "9.50~dfsg-5ubuntu4.5" }, { "binary_name": "libgs9", "binary_version": "9.50~dfsg-5ubuntu4.5" }, { "binary_name": "libgs9-common", "binary_version": "9.50~dfsg-5ubuntu4.5" } ], "ubuntu_priority": "low", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "ghostscript", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" }, { "binary_name": "ghostscript-dbgsym", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" }, { "binary_name": "ghostscript-doc", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" }, { "binary_name": "ghostscript-x", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" }, { "binary_name": "ghostscript-x-dbgsym", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" }, { "binary_name": "libgs-dev", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" }, { "binary_name": "libgs9", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" }, { "binary_name": "libgs9-common", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" }, { "binary_name": "libgs9-dbgsym", "binary_version": "9.55.0~dfsg1-0ubuntu5.1" } ], "ubuntu_priority": "low", "availability": "No subscription required" }