A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-doc | Nov 16, 2023 | Aug 1, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 21, 2024 | Aug 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-docUpgrade ghostscriptUpgrade libgsUpgrade libgs-devel | Aug 24, 2023 | Aug 1, 2023 |
| Amazon_linux | — | Upgrade ghostscript | Aug 23, 2023 | Aug 1, 2023 |
| Amazon_linux_2023 | — | Upgrade libgs-develUpgrade ghostscript-gtk-debuginfoUpgrade ghostscriptUpgrade ghostscript-debugsourceUpgrade ghostscript-gtkUpgrade ghostscript-x11Upgrade ghostscript-docUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade libgs-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-debuginfoUpgrade ghostscript-x11-debuginfo | Feb 17, 2025 | Jul 17, 2023 |
| Centos_linux | — | Upgrade ghostscript-tools-printingUpgrade libgs-debuginfoUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-debugsourceUpgrade ghostscript-x11Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfo | Nov 8, 2023 | Aug 1, 2023 |
| Debian | — | Upgrade ghostscript | Aug 9, 2023 | Aug 1, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.02.0 | Jul 8, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ghostscriptUpgrade libgs | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Aug 1, 2023 |
| Oracle_linux | — | Upgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-docUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fonts | Nov 16, 2023 | Jul 17, 2023 |
| Redhat_linux | — | Upgrade libgs-debuginfoUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscriptNo solution existsUpgrade libgs-devel | Nov 8, 2023 | Aug 1, 2023 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-x11 | Aug 29, 2023 | Aug 1, 2023 |
| Ubuntu | — | Upgrade ghostscript (Ubuntu Pro)Upgrade libgs9 (Ubuntu Pro)Upgrade libgs10Upgrade libgs9Upgrade ghostscript | Aug 18, 2023 | Aug 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub