The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscriptUpgrade wireshark | May 3, 2018 | Apr 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscriptUpgrade ghostscript-cupsUpgrade ghostscript-docUpgrade ghostscript-develUpgrade ghostscript-gtk | Apr 27, 2020 | Apr 18, 2018 |
| Centos_linux | — | Upgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-develUpgrade ghostscript-cups | Oct 17, 2018 | Apr 18, 2018 |
| Debian | — | Upgrade ghostscript | Feb 19, 2019 | Apr 18, 2018 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Nov 26, 2018 | Apr 18, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.23 | Oct 10, 2018 | Apr 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Dec 31, 2018 | Apr 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Dec 11, 2018 | Apr 18, 2018 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.26-0.175.3.36.0.10.0 on Solaris 11.3 | Oct 19, 2018 | Apr 18, 2018 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-cups | Jul 21, 2020 | Apr 20, 2018 |
| Redhat_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-develUpgrade ghostscript-debuginfoUpgrade ghostscriptUpgrade ghostscript-docNo solution existsUpgrade ghostscript-gtk | Oct 17, 2018 | Apr 18, 2018 |
| Suse | — | Upgrade libgimpprintUpgrade ghostscript-develUpgrade ghostscript-x11Upgrade libgimpprint-develUpgrade ghostscript-fonts-rusUpgrade ghostscriptUpgrade ghostscript-fonts-stdUpgrade ghostscript-ijs-develUpgrade ghostscript-fonts-otherUpgrade ghostscript-miniUpgrade ghostscript-omniUpgrade ghostscript-libraryUpgrade ghostscript-mini-devel | May 19, 2018 | Apr 18, 2018 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | May 12, 2018 | Apr 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub