Wind River Support Network

HomeDefectsLIN10-9454

Fixed

LIN10-9454 : Security Advisory - ghostscript - CVE-2021-45949

Created: Jan 3, 2022 Updated: Feb 22, 2022

Resolved Date: Feb 22, 2022

Found In Version: 10.17.41.1

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp).

CREATE(Triage):(User=admin) CVE-2021-45949 (https://nvd.nist.gov/vuln/detail/CVE-2021-45949)

CVEs

CVE-2021-45949