Gnu A2Ps vulnerabilities

5 vulnerabilities

Known vulnerabilities in Gnu A2Ps, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2015-8107debiana2ps+2
EPSS score
2.77%
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.6.8CVE-2014-0466debiana2ps+4
EPSS score
2.33%
The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.2.1CVE-2001-1593debiana2ps+3
EPSS score
0.40%
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.2.1CVE-2004-1377debiana2ps+3
EPSS score
0.36%
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.10CVE-2004-1170debiana2ps+3
EPSS score
15.98%
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.