A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printing | Nov 16, 2023 | Aug 1, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 21, 2024 | Aug 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscriptUpgrade libgsUpgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-cups | Aug 24, 2023 | Aug 1, 2023 |
| Amazon_linux | — | Upgrade ghostscript | Aug 23, 2023 | Aug 1, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-x11Upgrade ghostscript-gtkUpgrade ghostscript-gtk-debuginfoUpgrade libgs-develUpgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfoUpgrade libgsUpgrade libgs-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printing | Feb 17, 2025 | Jul 17, 2023 |
| Centos_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade ghostscript-debugsourceUpgrade ghostscript-gtk-debuginfoUpgrade libgs-debuginfoUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade libgs | Nov 8, 2023 | Aug 1, 2023 |
| Debian | — | Upgrade ghostscript | Aug 9, 2023 | Aug 1, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.02.0 | Jul 8, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libgsUpgrade ghostscript | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Aug 1, 2023 |
| Oracle_linux | — | Upgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade libgsUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-tools-dvipdf | Nov 16, 2023 | Jul 17, 2023 |
| Redhat_linux | — | Upgrade ghostscriptNo solution existsUpgrade ghostscript-x11Upgrade libgs-develUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-debugsourceUpgrade libgs-debuginfoUpgrade ghostscript-x11-debuginfo | Nov 8, 2023 | Aug 1, 2023 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-develUpgrade ghostscript | Aug 29, 2023 | Aug 1, 2023 |
| Ubuntu | — | Upgrade libgs9 (Ubuntu Pro)Upgrade ghostscript (Ubuntu Pro)Upgrade libgs10Upgrade ghostscriptUpgrade libgs9 | Aug 18, 2023 | Aug 1, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub