The version of ghostscript installed on the remote host is prior to 9.54.0-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2820 advisory.

    Fix confusion between bytes and shorts. Data is being copied from a string in multiple of shorts, rather     than multiple of bytes, leading to both a read (probably benign, given the memory manager) and write     buffer overflow.

    Info: https://bugs.ghostscript.com/show_bug.cgi?id=708131Patch: https://cgit.ghostscript.com/cgi-     bin/cgit.cgi/ghostpdl.git/commit/?id=de900010a6f2310d1fd54e99eeba466693da0e13 (ghostpdl-10.05.0)     (CVE-2025-27835)

    Potential print buffer overflow. Fixed in ghostpdl-10.05.0 by implementing stricter buffer length     validation.

    Info: https://bugs.ghostscript.com/show_bug.cgi?id=708192Patch: https://cgit.ghostscript.com/cgi-     bin/cgit.cgi/ghostpdl.git/commit/?id=8b6d19b2b4079da6863ef25f2370f25d4b054919 (ghostpdl-10.05.0)     (CVE-2025-27836)

    Patch to error check UTF-8 conversions. Fixed in ghostpdl-10.05.0 by adding a check on the value returned     by the gp_utf8_to_uint16 function.

    Info: https://bugs.ghostscript.com/show_bug.cgi?id=708238Patch: https://cgit.ghostscript.com/cgi-     bin/cgit.cgi/ghostpdl.git/commit/?id=dbb9f2b11f820697e77863523a8d835ab040e5d1 (ghostpdl-10.05.0)     (CVE-2025-27837)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : ghostscript (ALAS-2025-2820)

critical Nessus Plugin ID 234521

Version 1.2

Version 1.1

Version 1.2 Jan 21, 2026, 5:00 PM IAVM reference Plugin Feed: 202601211700
Version 1.1 Apr 17, 2025, 10:25 AM New Plugin Feed: 202504171025