Description
Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | enscript | 1.6.4-13 | — |
| Debian 13 | enscript | 1.6.4-13 | — |
| Debian 12 | enscript | 1.6.4-13 | — |
| Debian 4.0 | enscript | 1.6.4-11.1 | DSA-1670-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | enscript | 1.6.4-4.1.1.el5_2 | RHSA-2008:1016 |
| RHEL 4 | enscript | 1.6.1-33.el4_7.1 | RHSA-2008:1021 |
| RHEL 3 | enscript | 1.6.1-24.7 | RHSA-2008:1021 |
| RHEL 2 | enscript | 1.6.1-16.7 | RHSA-2008:1021 |
Advisories 3
- RHSA-2008:1021 Red Hat Security Advisory: enscript security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:1016 Red Hat Security Advisory: enscript security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1670-1 enscript - arbitrary code execution Debian Security (DSA / DLA) · Mar 9, 2026
References
- oval:org.mitre.oval:def:10718 vdb-entry signature
- 32521 third-party-advisory
- 49569 vdb-entry
- SUSE-SR:2008:024 vendor-advisory
- FEDORA-2008-9372 vendor-advisory
- FEDORA-2008-9351 vendor-advisory
- RHSA-2008:1016 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm
- USN-660-1 vendor-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321
- GLSA-200812-02 vendor-advisory
- 20081117 rPSA-2008-0321-1 enscript mailing-list
- https://issues.rpath.com/browse/RPL-2887
- 32854 third-party-advisory
- MDVSA-2008:243 vendor-advisory
- 32970 third-party-advisory
- 32530 third-party-advisory
- DSA-1670 vendor-advisory
- 32753 third-party-advisory
- 33109 third-party-advisory
- RHSA-2008:1021 vendor-advisory