The remote NewStart CGSL host, running version MAIN 7.02, has ghostscript packages installed that are affected by multiple vulnerabilities:

  - Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a     \000 byte in the middle. (CVE-2024-29509)

  - Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe%     prefix or the | pipe character prefix). (CVE-2023-36664)

  - A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This     issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN     device with gs. (CVE-2023-38559)

  - IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@,     @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ). If an     administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with     database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. (CVE-2023-39417)

  - A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows     against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some     rows that INSERT policies do not forbid, a user could store such rows. (CVE-2023-39418)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary     code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs     because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library;
    this library is then loaded.(CVE-2024-33871)

    An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used,     allows eexec seeds other than the Type 1 standard.(CVE-2023-52722)

    An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when     parsing the filename format string (for the output filename) results in path truncation, and possible path     traversal and code execution.(CVE-2024-46953)

    An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in     filenameforall can lead to arbitrary code execution.(CVE-2024-46956)

    An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation     pointer in Pattern color space could lead to arbitrary code execution.(CVE-2024-46951)

    An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds     read when reading color in Indexed color space.(CVE-2024-46955)

Tenable has extracted the preceding description block directly from the EulerOS ghostscript security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4362 advisory.

    - RHEL-18396 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
    - RHEL-67046 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color     Space
    - RHEL-15067 CVE-2020-27792 ghostscript: heap buffer over write vulnerability in GhostScript's     lp8000_print_page() in gdevlp8k.c
    - RHEL-67051 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
    - RHEL-67051 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in     Ghostscript

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7499 advisory.

    The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript     translates PostScript code to common bitmap formats so that the code can be displayed or printed.

    Security Fix(es):

    * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)

    * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)

    * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)

    * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)

    * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3965 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3965-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     November 24, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : ghostscript     Version        : 9.53.3~dfsg-7+deb11u9     CVE ID         : CVE-2024-46951 CVE-2024-46953 CVE-2024-46955 CVE-2024-46956

    Multiple vulnerabilities have been fixed in the PostScript/PDF     interpreter Ghostscript.

    CVE-2024-46951

        PS interpreter unchecked pointer

    CVE-2024-46953

        output filename format string integer overflow

    CVE-2024-46955

        PS interpreter out-of-bounds

    CVE-2024-46956

        PS interpreter out-of-bounds

    For Debian 11 bullseye, these problems have been fixed in version     9.53.3~dfsg-7+deb11u9.

    We recommend that you upgrade your ghostscript packages.

    For the detailed security status of ghostscript please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/ghostscript

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0529 advisory.

    This advisory aggregates security fixes for the ghostscript SRPM in CIQ LTS 9.4. It addresses 3 CVEs:
    CVE-2024-46953, CVE-2024-46956, CVE-2024-46951.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_4362 advisory.

    * ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c     (CVE-2020-27792)

    * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)

    * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)

    * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)

    * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)

    * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)

    * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
242730	NewStart CGSL MAIN 7.02 : ghostscript Multiple Vulnerabilities (NS-SA-2025-0121)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	high
214173	EulerOS 2.0 SP9 : ghostscript (EulerOS-SA-2025-1055)	Nessus	Huawei Local Security Checks	2025/1/14	2025/3/28	high
235035	Oracle Linux 8 : ghostscript (ELSA-2025-4362)	Nessus	Oracle Linux Local Security Checks	2025/4/30	2025/9/11	high
237816	RHEL 10 : ghostscript (RHSA-2025:7499)	Nessus	Red Hat Local Security Checks	2025/6/5	2025/6/5	high
211778	Debian dla-3965 : ghostscript - security update	Nessus	Debian Local Security Checks	2024/11/24	2025/3/28	high
355648	Rocky Linux 9.4 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0529)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
356556	Rocky Linux 8 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (crlsa-2025_4362)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

検出

プラグインの検索

high

high

high

high

high

high

high