Summary
It was discovered that Ghostscript incorrectly handled outputting certain
PDF files. A local attacker could potentially use this issue to cause
a crash, resulting in a denial of service.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | ghostscript | 9.50~dfsg-5ubuntu4.9 |
| Ubuntu · 22.04 LTS 22.04:LTS | ghostscript | 9.55.0~dfsg1-0ubuntu5.4 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.14+esm6 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.18+esm1 |
Vulnerabilities 1
-
Medium 5.5
Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
References
-
report
https://ubuntu.com/security/CVE-2023-38559