In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-ghostscriptalma-upgrade-ghostscript-docalma-upgrade-ghostscript-tools-dvipdfalma-upgrade-ghostscript-tools-fontsalma-upgrade-ghostscript-tools-printingalma-upgrade-ghostscript-x11alma-upgrade-libgsalma-upgrade-libgs-devel | Nov 16, 2023 | Mar 31, 2023 | |
| Alpine Linux | alpine-linux-upgrade-ghostscript | Mar 26, 2024 | Mar 31, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ghostscriptamazon-linux-ami-2-upgrade-ghostscript-cupsamazon-linux-ami-2-upgrade-ghostscript-debuginfoamazon-linux-ami-2-upgrade-ghostscript-docamazon-linux-ami-2-upgrade-ghostscript-gtkamazon-linux-ami-2-upgrade-libgsamazon-linux-ami-2-upgrade-libgs-devel | May 3, 2023 | Mar 31, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-ghostscript | May 4, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-ghostscriptamazon-linux-2023-upgrade-ghostscript-debuginfoamazon-linux-2023-upgrade-ghostscript-debugsourceamazon-linux-2023-upgrade-ghostscript-docamazon-linux-2023-upgrade-ghostscript-gtkamazon-linux-2023-upgrade-ghostscript-gtk-debuginfoamazon-linux-2023-upgrade-ghostscript-tools-dvipdfamazon-linux-2023-upgrade-ghostscript-tools-fontsamazon-linux-2023-upgrade-ghostscript-tools-printingamazon-linux-2023-upgrade-ghostscript-x11amazon-linux-2023-upgrade-ghostscript-x11-debuginfoamazon-linux-2023-upgrade-libgsamazon-linux-2023-upgrade-libgs-debuginfoamazon-linux-2023-upgrade-libgs-devel | Feb 17, 2025 | Mar 31, 2023 | |
| Centos_linux | — | centos-upgrade-ghostscriptcentos-upgrade-ghostscript-debuginfocentos-upgrade-ghostscript-debugsourcecentos-upgrade-ghostscript-doccentos-upgrade-ghostscript-gtk-debuginfocentos-upgrade-ghostscript-tools-dvipdfcentos-upgrade-ghostscript-tools-fontscentos-upgrade-ghostscript-tools-printingcentos-upgrade-ghostscript-x11centos-upgrade-ghostscript-x11-debuginfocentos-upgrade-libgscentos-upgrade-libgs-debuginfo | Nov 8, 2023 | Mar 31, 2023 |
| Debian | debian-upgrade-ghostscript | Apr 6, 2023 | Mar 31, 2023 | |
| Freebsd | freebsd-upgrade-package-ghostscriptfreebsd-upgrade-package-ghostscript7-basefreebsd-upgrade-package-ghostscript7-commfontfreebsd-upgrade-package-ghostscript7-jpnfontfreebsd-upgrade-package-ghostscript7-korfontfreebsd-upgrade-package-ghostscript7-x11freebsd-upgrade-package-ghostscript8-basefreebsd-upgrade-package-ghostscript8-x11freebsd-upgrade-package-ghostscript9-agpl-base | Apr 14, 2023 | Apr 13, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-app-text-ghostscript-gpl | Sep 18, 2023 | Mar 31, 2023 | |
| Ghostscript | ghostscript-upgrade-10_01_0 | May 25, 2023 | Mar 31, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-ghostscripthuawei-euleros-2_0_sp10-upgrade-ghostscript-help | May 9, 2023 | Mar 31, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-ghostscripthuawei-euleros-2_0_sp5-upgrade-ghostscript-cups | Feb 12, 2024 | Mar 31, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ghostscripthuawei-euleros-2_0_sp8-upgrade-libgs | Jan 10, 2024 | Mar 31, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-ghostscripthuawei-euleros-2_0_sp9-upgrade-ghostscript-help | Jul 10, 2023 | Mar 31, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-ghostscriptoracle-linux-upgrade-ghostscript-docoracle-linux-upgrade-ghostscript-tools-dvipdforacle-linux-upgrade-ghostscript-tools-fontsoracle-linux-upgrade-ghostscript-tools-printingoracle-linux-upgrade-ghostscript-x11oracle-linux-upgrade-libgsoracle-linux-upgrade-libgs-devel | Nov 16, 2023 | Mar 31, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-ghostscriptredhat-upgrade-ghostscript-debuginforedhat-upgrade-ghostscript-debugsourceredhat-upgrade-ghostscript-docredhat-upgrade-ghostscript-gtk-debuginforedhat-upgrade-ghostscript-tools-dvipdfredhat-upgrade-ghostscript-tools-fontsredhat-upgrade-ghostscript-tools-printingredhat-upgrade-ghostscript-x11redhat-upgrade-ghostscript-x11-debuginforedhat-upgrade-libgsredhat-upgrade-libgs-debuginforedhat-upgrade-libgs-devel | Nov 8, 2023 | Mar 31, 2023 | |
| Suse | — | suse-upgrade-ghostscriptsuse-upgrade-ghostscript-develsuse-upgrade-ghostscript-x11 | Apr 10, 2023 | Mar 31, 2023 |
| Ubuntu | ubuntu-pro-upgrade-ghostscriptubuntu-pro-upgrade-libgs9ubuntu-upgrade-ghostscriptubuntu-upgrade-libgs10ubuntu-upgrade-libgs9 | Apr 17, 2023 | Mar 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub