CVE-2014-0466
Fixed in a distro release EPSS 2%
The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.
Products: gnu a2ps
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | a2ps | 4.14-9 |
| Debian 12 | a2ps | 1:4.14-1.3 |
| Debian 13 | a2ps | 1:4.14-1.3 |
| Debian 14 | a2ps | 1:4.14-1.3 |
| Debian 6.0 | a2ps | 1:4.14-1.1+deb6u1 |
| Debian 7 | a2ps | 1:4.14-1.1+deb7u1 |
| openSUSE Tumbleweed | a2ps | 4.14-6.6 |