A2ps

This hub aggregates every CVE we track for A2ps, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting A2ps.

• CVE-2015-8107Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.7.8Apr 13, 2017
• CVE-2001-1593The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink at...2.1Apr 5, 2014
• CVE-2014-0466The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostS...6.8Apr 3, 2014
• CVE-2004-1377The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.2.1Jan 19, 2005
• CVE-2004-1170a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.10.0Dec 10, 2004