Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-38559HistoryAug 01, 2023 - 5:15 p.m.
CVE-2023-38559
2023-08-0117:15:09
Debian Security Bug Tracker
security-tracker.debian.org
14
buffer overflow
ghostscript
denial of service
crafted pdf file
devn device
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
20.3%
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ghostscript | < 10.0.0~dfsg-11+deb12u2 | ghostscript_10.0.0~dfsg-11+deb12u2_all.deb |
| Debian | 11 | all | ghostscript | < 9.53.3~dfsg-7+deb11u6 | ghostscript_9.53.3~dfsg-7+deb11u6_all.deb |
| Debian | 999 | all | ghostscript | < 10.02.0~dfsg-1 | ghostscript_10.02.0~dfsg-1_all.deb |
| Debian | 13 | all | ghostscript | < 10.02.0~dfsg-1 | ghostscript_10.02.0~dfsg-1_all.deb |
Related
openvas
openvas
openSUSE: Security Advisory for ghostscript (SUSE-SU-2023:3438-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6297-1)
2023-08-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3439-1)
2023-08-29 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ghostscript (SUSE-SU-2023:3438-1)
2023-08-30 00:00:00
Artifex Ghostscript < 10.2.0 Buffer Overflow
2023-09-19 00:00:00
Debian DLA-3519-1 : ghostscript - LTS security update
2023-08-07 00:00:00
amazon
amazon
Medium: ghostscript
2023-08-17 11:39:00
Medium: ghostscript
2023-08-17 11:57:00
nvd
nvd
CVE-2023-38559
2023-08-01 17:15:09
osv
osv
ghostscript vulnerability
2023-08-17 13:53:47
ghostscript - security update
2023-08-07 00:00:00
Moderate: ghostscript security and bug fix update
2023-11-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: ghostscript-9.56.1-9.fc37
2023-08-16 00:38:48
[SECURITY] Fedora 38 Update: ghostscript-10.01.2-3.fc38
2023-08-12 04:26:43
cvelist
cvelist
cve
cve
CVE-2023-38559
2023-08-01 17:15:09
redos
redos
ROS-20230907-01
2023-09-07 00:00:00
cgr
cgr
CVE-2023-38559 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2023-38559
2023-08-01 14:30:54
veracode
veracode
Buffer Overflow
2023-08-20 21:02:06
prion
prion
Buffer overflow
2023-08-01 17:15:00
debian
debian
[SECURITY] [DLA 3519-1] ghostscript security update
2023-08-07 14:06:09
wolfi
wolfi
CVE-2023-38559 vulnerabilities
2024-07-05 21:08:40
ubuntucve
ubuntucve
CVE-2023-38559
2023-08-01 00:00:00
ubuntu
ubuntu
Ghostscript vulnerability
2023-08-17 00:00:00
alpinelinux
alpinelinux
CVE-2023-38559
2023-08-01 17:15:09
mageia
mageia
Updated ghostscript packages fix security vulnerability
2023-09-11 16:07:54
almalinux
almalinux
Moderate: ghostscript security and bug fix update
2023-11-07 00:00:00
Moderate: ghostscript security and bug fix update
2023-11-14 00:00:00
redhat
redhat
oraclelinux
oraclelinux
ghostscript security and bug fix update
2023-11-11 00:00:00
ghostscript security and bug fix update
2023-11-17 00:00:00
hp
hp
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
20.3%
Related for DEBIANCVE:CVE-2023-38559