The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7623-1 advisory.

    It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a     user or system were tricked into opening a specially crafted file, an attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
    (CVE-2023-39327)

    Thomas Rinsma discovered that Ghostscript did not correctly handle printing certain variables. An attacker     could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and     Ubuntu 18.04 LTS. (CVE-2024-29508)

    It was discovered that Ghostscript did not correctly handle loading certain libraries. An attacker could     possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS.
    (CVE-2024-33871)

    It was discovered that Ghostscript did not correctly handle certain memory operations. An attacker could     possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu     18.04 LTS. (CVE-2024-56826, CVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836)

    Vasileios Flengas discovered that Ghostscript did not correctly handle argument sanitization. An attacker     could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS,     Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3a7a29de24 advisory.

    CVE-2025-27835 ghostscript: Buffer overflow when converting glyphs to unicode (fedora#2355025)

    CVE-2025-27834 ghostscript: Buffer overflow caused by an oversized Type 4 function in a PDF     (fedora#2355023)

    CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow (fedora#2355021)

    CVE-2025-27836 ghostscript: device: Print buffer overflow (fedora#2355019)

    CVE-2025-27830 ghostscript: Buffer overflow during serialization of DollarBlend in font (fedora#2355015)

    CVE-2025-27833 ghostscript: Buffer overflow with long TTF font name (fedora#2355011)

    CVE-2025-27837 ghostscript: Access to arbitrary files through truncated path with invalid UTF-8     (fedora#2355009)

    CVE-2025-27831 ghostscript: Text buffer overflow with long characters (fedora#2355007)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1118-1 advisory.

    - CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to     devices/vector/doc_common.c (bsc#1240075)
      - CVE-2025-27832: Fixed compression buffer overflow in NPDL device for contrib/japanese/gdevnpdl.c     (bsc#1240077)
      - CVE-2025-27835: Fixed buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c     (bsc#1240080)
      - CVE-2025-27836: Fixed Print buffer overflow in BJ10V device in contrib/japanese/gdev10v.c     (bsc#1240081)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4118 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4118-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     April 07, 2025                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : ghostscript     Version        : 9.53.3~dfsg-7+deb11u10     CVE ID         : CVE-2025-27830 CVE-2025-27831 CVE-2025-27832 CVE-2025-27835                      CVE-2025-27836

    Multiple vulnerabilities have been fixed in the PostScript/PDF     interpreter Ghostscript.

    CVE-2025-27830

        Buffer overflow via serialization of DollarBlend

    CVE-2025-27831

        Unicode decoding overrun

    CVE-2025-27832

        Integer overflow leading to buffer overflow

    CVE-2025-27835

        Confusion between bytes and shorts

    CVE-2025-27836

        Buffer overflow in bj10v device

    For Debian 11 bullseye, these problems have been fixed in version     9.53.3~dfsg-7+deb11u10.

    We recommend that you upgrade your ghostscript packages.

    For the detailed security status of ghostscript please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/ghostscript

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)

    An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer     overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)

    An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer     overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)

Tenable has extracted the preceding description block directly from the EulerOS ghostscript security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775210556 advisory.

  - An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during     serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c. (CVE-2025-27830)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text     buffer overflow via long characters to devices/vector/doc_common.c. (CVE-2025-27831)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c. (CVE-2025-27835)

  - An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer     overflow in contrib/japanese/gdev10v.c. (CVE-2025-27836)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202508-02 (GPL Ghostscript: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers     referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting     glyphs to Unicode in psi/zbfont.c. (CVE-2025-27835)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
241623	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Ghostscript vulnerabilities (USN-7623-1)	Nessus	Ubuntu Local Security Checks	2025/7/9	2026/1/21	low
234110	Fedora 40 : ghostscript (2025-3a7a29de24)	Nessus	Fedora Local Security Checks	2025/4/10	2026/1/21	critical
233800	SUSE SLES12 Security Update : ghostscript (SUSE-SU-2025:1118-1)	Nessus	SuSE Local Security Checks	2025/4/3	2026/1/21	critical
233980	Debian dla-4118 : ghostscript - security update	Nessus	Debian Local Security Checks	2025/4/7	2026/1/21	critical
235745	EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2025-1510)	Nessus	Huawei Local Security Checks	2025/5/12	2026/1/21	critical
351858	Rocky Linux 9.6 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775210556)	Nessus	Rocky Linux Local Security Checks	2026/9/30	2026/9/30	critical
243974	GLSA-202508-02 : GPL Ghostscript: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2025/8/6	2025/8/6	critical
260289	Linux Distros Unpatched Vulnerability : CVE-2025-27835	Nessus	Misc.	2025/9/2	2026/11/5	high

検出

プラグインの検索

low

critical

critical

critical

critical

critical

critical

high