CVE-2021-45944

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp).
Configurations

Configuration 1 (hide)

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

History

21 Jan 2022, 14:41

Type Values Removed Values Added
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
First Time Debian
Debian debian Linux
References (MLIST) https://lists.debian.org/debian-lts-announce/2022/01/msg00006.html - (MLIST) https://lists.debian.org/debian-lts-announce/2022/01/msg00006.html - Mailing List, Third Party Advisory
References (MISC) https://github.com/google/oss-fuzz-vulns/issues/16 - (MISC) https://github.com/google/oss-fuzz-vulns/issues/16 - Issue Tracking
References (MISC) https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=7861fcad13c497728189feafb41cd57b5b50ea25 - (MISC) https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=7861fcad13c497728189feafb41cd57b5b50ea25 - Issue Tracking
References (DEBIAN) https://www.debian.org/security/2022/dsa-5038 - (DEBIAN) https://www.debian.org/security/2022/dsa-5038 - Third Party Advisory
References (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30715 - (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30715 - Third Party Advisory

17 Jan 2022, 18:15

Type Values Removed Values Added
References
  • (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30715 -
  • (MISC) https://github.com/google/oss-fuzz-vulns/issues/16 -
  • (MISC) https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=7861fcad13c497728189feafb41cd57b5b50ea25 -

15 Jan 2022, 00:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2022/01/msg00006.html -

10 Jan 2022, 14:11

Type Values Removed Values Added
CVSS v2 : 2.1
v3 : 5.5
v2 : 4.3
v3 : 5.5
References
  • (DEBIAN) https://www.debian.org/security/2022/dsa-5038 -

07 Jan 2022, 18:32

Type Values Removed Values Added
References (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903 - (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903 - Exploit, Issue Tracking, Third Party Advisory
References (MISC) https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml - (MISC) https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml - Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 2.1
v3 : 5.5
CPE cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*
CWE CWE-416
First Time Artifex
Artifex ghostscript

01 Jan 2022, 01:15

Type Values Removed Values Added
Summary Ghostscript GhostPDL 9.50 through-9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp).

01 Jan 2022, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-01-01 00:15

Updated : 2022-01-21 14:41


NVD link : CVE-2021-45944

Mitre link : CVE-2021-45944


JSON object : View

Products Affected

debian

  • debian_linux

artifex

  • ghostscript
CWE
CWE-416

Use After Free