GhostScript: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 5.5
  CVE-2023-38559

  Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos

  A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Wolfi
  Aug 1, 2023
• Medium 5.5
  CVE-2023-38560

  Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name

  An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Wolfi
  Aug 1, 2023

Revision history

1. 2024-03-03 #9

   Neue Updates von XEROX aufgenommen

2. 2023-11-16 #8

   Neue Updates von Oracle Linux aufgenommen

3. 2023-11-14 #7

   Neue Updates von Red Hat aufgenommen

4. 2023-11-07 #6

   Neue Updates von Red Hat aufgenommen

5. 2023-08-27 #5

   Neue Updates von SUSE aufgenommen

6. 2023-08-23 #4

   Neue Updates von Amazon aufgenommen

7. 2023-08-17 #3

   Neue Updates von Ubuntu aufgenommen

8. 2023-08-07 #2

   Neue Updates von Fedora und Debian aufgenommen

9. 2023-08-06 #1

   Initiale Fassung

References

• Red Hat Bugzilla – Bug 2224367 vom 2023-08-06
  https://bugzilla.redhat.com/show_bug.cgi?id=2224367
• Fedora Security Advisory FEDORA-2023-D0EF677E6F vom 2023-08-07
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d0ef677e6f
• Fedora Security Advisory FEDORA-2023-CBA4A3A00F vom 2023-08-07
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-cba4a3a00f
• Debian Security Advisory DLA-3519 vom 2023-08-07
  https://lists.debian.org/debian-lts-announce/2023/08/msg00006.html
• Ubuntu Security Notice USN-6297-1 vom 2023-08-17
  https://ubuntu.com/security/notices/USN-6297-1
• Amazon Linux Security Advisory ALAS-2023-1801 vom 2023-08-23
  https://alas.aws.amazon.com/ALAS-2023-1801.html
• Amazon Linux Security Advisory ALAS-2023-2204 vom 2023-08-23
  https://alas.aws.amazon.com/AL2/ALAS-2023-2204.html
• SUSE Security Update SUSE-SU-2023:3439-1 vom 2023-08-28
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/016027.html
• SUSE Security Update SUSE-SU-2023:3438-1 vom 2023-08-28
  https://lists.suse.com/pipermail/sle-security-updates/2023-August/016028.html
• Red Hat Security Advisory RHSA-2023:6544 vom 2023-11-07
  https://access.redhat.com/errata/RHSA-2023:6544
• Red Hat Security Advisory RHSA-2023:7053 vom 2023-11-15
  https://access.redhat.com/errata/RHSA-2023:7053
• Oracle Linux Security Advisory ELSA-2023-6732 vom 2023-11-16
  https://linux.oracle.com/errata/ELSA-2023-6732.html
• XEROX Security Advisory XRX24-005 vom 2024-03-04
  https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf
• XEROX Security Advisory XRX24-004 vom 2024-03-04
  https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox%C2%AE-Security-Bulletin-XRX24-004-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v7.pdf