A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade libgsUpgrade libgs-develUpgrade ghostscript-x11 | Nov 16, 2023 | Aug 1, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 21, 2024 | Aug 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscriptUpgrade libgsUpgrade libgs-devel | Aug 24, 2023 | Aug 1, 2023 |
| Amazon_linux | — | Upgrade ghostscript | Aug 23, 2023 | Aug 1, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-x11Upgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-debugsourceUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade libgs-debuginfoUpgrade libgsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-dvipdf | Feb 17, 2025 | Jul 17, 2023 |
| Centos_linux | — | Upgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-dvipdfUpgrade libgs-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade libgsUpgrade ghostscript-doc | Nov 8, 2023 | Aug 1, 2023 |
| Debian | — | Upgrade ghostscript | Aug 9, 2023 | Aug 1, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.02.0 | Jul 8, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ghostscriptUpgrade libgs | Jan 10, 2024 | Aug 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Aug 1, 2023 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgsUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fonts | Nov 16, 2023 | Jul 17, 2023 |
| Redhat_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-x11Upgrade libgs-develNo solution existsUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-debugsourceUpgrade ghostscript-x11-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfo | Nov 8, 2023 | Aug 1, 2023 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-x11 | Aug 29, 2023 | Aug 1, 2023 |
| Ubuntu | — | Upgrade ghostscript (Ubuntu Pro)Upgrade libgs10Upgrade libgs9 (Ubuntu Pro)Upgrade libgs9Upgrade ghostscript | Aug 18, 2023 | Aug 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub