A2
Product
A2ps
5
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add A2ps to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-8107 | 7.8 | Apr 13 | Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code Affected: 4.14 |
| CVE-2001-1593 | – | Apr 5 | The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary… Affected: through 4.14; 4.10.3; 4.10.4; 4.12; 4.13; 4.13b |
| CVE-2014-0466 | – | Apr 3 | The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands… Affected: 4.14 |
| CVE-2004-1170 | – | Jan 10 | a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename Affected: 4.13; 4.13b |
| CVE-2004-1377 | – | Dec 27 | The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files Affected: 4.13; 4.13b |
Showing 5