UbuntuUSN-6017-2Ghostscript vulnerability
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.9%
Releases
- Ubuntu 23.04
Packages
- ghostscript - PostScript and PDF interpreter
Details
USN-6017-1 fixed vulnerabilities in Ghostscript. This update provides the
corresponding updates for Ubuntu 23.04.
Original advisory details:
Hadrien Perrineau discovered that Ghostscript incorrectly handled certain
inputs. An attacker could possibly use this issue to cause a denial of
service, or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.04 | noarch | ghostscript | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | ghostscript-dbgsym | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | ghostscript-doc | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | ghostscript-x | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libgs-common | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libgs-dev | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libgs10 | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libgs10-common | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libgs10-dbgsym | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | libgs9-common | < 10.0.0~dfsg1-0ubuntu1.1 | UNKNOWN |
References
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.9%