A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-docUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-x11Upgrade libgs | Nov 16, 2023 | Aug 1, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 21, 2024 | Aug 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-devel | Aug 24, 2023 | Aug 1, 2023 |
| Amazon_linux | — | Upgrade ghostscript | Aug 23, 2023 | Aug 1, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade libgs-debuginfoUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdf | Feb 17, 2025 | Jul 17, 2023 |
| Centos_linux | — | Upgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-gtk-debuginfoUpgrade libgs-debuginfoUpgrade libgsUpgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade ghostscript-x11-debuginfo | Nov 8, 2023 | Aug 1, 2023 |
| Debian | — | Upgrade ghostscript | Aug 9, 2023 | Aug 1, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.02.0 | Jul 8, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libgsUpgrade ghostscript | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Aug 1, 2023 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-doc | Nov 16, 2023 | Jul 17, 2023 |
| Redhat_linux | — | Upgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-tools-printingUpgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade ghostscriptUpgrade libgsNo solution existsUpgrade ghostscript-tools-dvipdfUpgrade libgs-devel | Nov 8, 2023 | Aug 1, 2023 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-devel | Aug 29, 2023 | Aug 1, 2023 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9Upgrade libgs9 (Ubuntu Pro)Upgrade libgs10Upgrade ghostscript (Ubuntu Pro) | Aug 18, 2023 | Aug 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub