Red Hat Security AdvisoryRHSA-2023:7053
ghostscript security and bug fix update
Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) ghostscript-doc-9.27-11.el8, ghostscript-tools-dvipdf-9.27-11.el8, ghostscript-tools-fonts-9.27-11.el8 +2
- Red Hat Enterprise Linux AppStream (v. 8) ghostscript-9.27-11.el8, ghostscript-x11-9.27-11.el8, libgs-9.27-11.el8
Fixes 3 records
Priority HIGH 82
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06341 · Published 2023-03-31 · Partial fix CWE-787
Priority LOW 25
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00435 · Published 2023-08-01 · Partial fix · 9.27-11.el8, 9.54.0-13.el9 CWE-125
Priority LOW 25
A flaw was found in ghostscript.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00335 · Published 2023-08-23 · Partial fix · 9.27-11.el8 CWE-125
