A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade libgsUpgrade libgs-develUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-doc | Nov 16, 2023 | Aug 1, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 21, 2024 | Aug 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-develUpgrade libgs | Aug 24, 2023 | Aug 1, 2023 |
| Amazon_linux | — | Upgrade ghostscript | Aug 23, 2023 | Aug 1, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade libgsUpgrade libgs-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade libgs-develUpgrade ghostscript-gtkUpgrade ghostscript-x11Upgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-doc | Feb 17, 2025 | Jul 17, 2023 |
| Centos_linux | — | Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-debugsourceUpgrade libgs-debuginfoUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgsUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-dvipdf | Nov 8, 2023 | Aug 1, 2023 |
| Debian | — | Upgrade ghostscript | Aug 9, 2023 | Aug 1, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.02.0 | Jul 8, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libgsUpgrade ghostscript | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Aug 1, 2023 |
| Oracle_linux | — | Upgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade libgs-develUpgrade libgsUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade ghostscript-doc | Nov 16, 2023 | Jul 17, 2023 |
| Redhat_linux | — | No solution existsUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade ghostscriptUpgrade libgsUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-tools-printingUpgrade ghostscript-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-debugsource | Nov 8, 2023 | Aug 1, 2023 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-x11 | Aug 29, 2023 | Aug 1, 2023 |
| Ubuntu | — | Upgrade libgs9Upgrade ghostscriptUpgrade libgs9 (Ubuntu Pro)Upgrade libgs10Upgrade ghostscript (Ubuntu Pro) | Aug 18, 2023 | Aug 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub