Test ID:	1.3.6.1.4.1.25623.1.0.891527
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-1527-1)
Summary:	The remote host is missing an update for the Debian 'ghostscript' package(s) announced via the DLA-1527-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'ghostscript' package(s) announced via the DLA-1527-1 advisory. Vulnerability Insight: Tavis Ormandy discovered multiple vulnerabilities in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or the execution of arbitrary code if a malformed Postscript file is processed (despite the dSAFER sandbox being enabled). In addition this update changes the device to txtwrite for the ps2ascii tool to prevent an error due to the fix for CVE-2018-17183. For Debian 8 Jessie, these problems have been fixed in version 9.06~ dfsg-2+deb8u9. We recommend that you upgrade your ghostscript packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'ghostscript' package(s) on Debian 8. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16543 Debian Security Information: DSA-4288 (Google Search) https://www.debian.org/security/2018/dsa-4288 https://security.gentoo.org/glsa/201811-12 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=5b5536fa88a9e885032bc0df3852c3439399a5c0 https://bugs.ghostscript.com/show_bug.cgi?id=699670 https://lists.debian.org/debian-lts-announce/2018/09/msg00038.html https://usn.ubuntu.com/3768-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17183 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=fb713b3818b52d8a6cf62c951eba2e1795ff9624 https://bugs.ghostscript.com/show_bug.cgi?id=699708 RedHat Security Advisories: RHSA-2018:3834 https://access.redhat.com/errata/RHSA-2018:3834 https://usn.ubuntu.com/3773-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.