In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade libgsUpgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printing | Nov 16, 2023 | Mar 31, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 26, 2024 | Mar 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscript-gtkUpgrade ghostscript-debuginfo | May 3, 2023 | Mar 31, 2023 |
| Amazon_linux | — | Upgrade ghostscript | May 4, 2023 | Mar 31, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade libgs-debuginfoUpgrade libgsUpgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-tools-printing | Feb 17, 2025 | Mar 31, 2023 |
| Centos_linux | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-debugsourceUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-gtk-debuginfoUpgrade libgs-debuginfoUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade ghostscript-x11-debuginfo | Nov 8, 2023 | Mar 31, 2023 |
| Debian | — | Upgrade ghostscript | Apr 6, 2023 | Mar 31, 2023 |
| Freebsd | — | Upgrade ghostscript7-korfontUpgrade ghostscript7-jpnfontUpgrade ghostscript9-agpl-baseUpgrade ghostscript7-commfontUpgrade ghostscript7-x11Upgrade ghostscript8-baseUpgrade ghostscript7-baseUpgrade ghostscriptUpgrade ghostscript8-x11 | Apr 14, 2023 | Apr 13, 2023 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 18, 2023 | Mar 31, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.01.0 | May 25, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | May 9, 2023 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Feb 12, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ghostscriptUpgrade libgs | Jan 10, 2024 | Mar 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jul 10, 2023 | Mar 31, 2023 |
| Oracle_linux | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade libgs-devel | Nov 16, 2023 | Mar 31, 2023 |
| Redhat_linux | — | Upgrade ghostscript-x11Upgrade ghostscript-gtk-debuginfoNo solution existsUpgrade libgsUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-tools-fontsUpgrade libgs-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printing | Nov 8, 2023 | Mar 31, 2023 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-develUpgrade ghostscript | Apr 10, 2023 | Mar 31, 2023 |
| Ubuntu | — | Upgrade ghostscript (Ubuntu Pro)Upgrade libgs9 (Ubuntu Pro)Upgrade libgs10Upgrade libgs9Upgrade ghostscript | Apr 17, 2023 | Mar 31, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub