Fluid Attacks Database

Description

A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	ghostscript	=9.53.3~dfsg-7 \|\| =9.53.3~dfsg-7+deb11u1 \|\| =9.53.3~dfsg-7+deb11u2 \|\| =9.53.3~dfsg-7+deb11u3 \|\| =9.53.3~dfsg-7+deb11u4 \|\| =9.53.3~dfsg-7+deb11u5 \|\| >=0 <9.53.3~dfsg-7+deb11u6	9.53.3~dfsg-7+deb11u6
debian 12	ghostscript	=10.0.0~dfsg-11 \|\| =10.0.0~dfsg-11+deb12u1 \|\| >=0 <10.0.0~dfsg-11+deb12u2	10.0.0~dfsg-11+deb12u2
debian 13	ghostscript	>=0 <10.02.0~dfsg-1	10.02.0~dfsg-1
debian 14	ghostscript	>=0 <10.02.0~dfsg-1	10.02.0~dfsg-1
rpm rhel9	ghostscript	<0:9.54.0-13.el9	0:9.54.0-13.el9
rpm rhel6	ghostscript	-	-
rpm rhel7	ghostscript	-	-
rpm rhel8	ghostscript	<0:9.27-11.el8	0:9.27-11.el8

Aliases

1. CVE-2023-385592. NVD-2023-385593. OSV-DEBIAN-2023-385594. OSV-2023-385595. SECURITY-TRACKER-CVE-2023-38559

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.