This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-45949 →

UBUNTU-CVE-2021-45949

Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp).

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Ubuntu:Pro:16.04:LTS ghostscript

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14+esm1"}]}]

Ubuntu:18.04:LTS ghostscript

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.15"}]}]

Ubuntu:20.04:LTS ghostscript

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.5"}]}]