The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wiresharkUpgrade ghostscript | May 3, 2018 | Apr 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-cupsUpgrade ghostscript-docUpgrade ghostscript-debuginfo | Apr 27, 2020 | Apr 18, 2018 |
| Centos_linux | — | Upgrade ghostscriptUpgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-develUpgrade ghostscript-doc | Oct 17, 2018 | Apr 18, 2018 |
| Debian | — | Upgrade ghostscript | Feb 19, 2019 | Apr 18, 2018 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Nov 26, 2018 | Apr 18, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.23 | Oct 10, 2018 | Apr 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Dec 31, 2018 | Apr 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Dec 11, 2018 | Apr 18, 2018 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.26-0.175.3.36.0.10.0 on Solaris 11.3 | Oct 19, 2018 | Apr 18, 2018 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-develUpgrade ghostscript-cupsUpgrade ghostscript-gtk | Jul 21, 2020 | Apr 20, 2018 |
| Redhat_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-develUpgrade ghostscript-cupsUpgrade ghostscriptNo solution existsUpgrade ghostscript-gtkUpgrade ghostscript-doc | Oct 17, 2018 | Apr 18, 2018 |
| Suse | — | Upgrade libgimpprintUpgrade ghostscript-develUpgrade ghostscript-x11Upgrade libgimpprint-develUpgrade ghostscript-fonts-rusUpgrade ghostscriptUpgrade ghostscript-fonts-stdUpgrade ghostscript-ijs-develUpgrade ghostscript-omniUpgrade ghostscript-mini-develUpgrade ghostscript-libraryUpgrade ghostscript-miniUpgrade ghostscript-fonts-other | May 19, 2018 | Apr 18, 2018 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | May 12, 2018 | Apr 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub