5.5
CVSSv3

CVE-2023-38559

Published: 01/08/2023 Updated: 08/03/2024
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local malicious user to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.

Vulnerable Product Search on Vulmon Subscribe to Product

artifex ghostscript

redhat enterprise linux 8.0

redhat enterprise linux 9.0

fedoraproject fedora 37

fedoraproject fedora 38

debian debian linux 10.0

Vendor Advisories

Debian Bug report logs - #1043033 ghostscript: CVE-2023-38559 Package: src:ghostscript; Maintainer for src:ghostscript is Debian QA Group <packages@qadebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 4 Aug 2023 19:36:01 UTC Severity: important Tags: security, upstream Found in versions ...
Synopsis Moderate: ghostscript security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for ghostscript is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this u ...
Synopsis Moderate: ghostscript security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for ghostscript is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this u ...
A buffer overflow flaw was found in base/gdevdevnc:1973 in devn_pcx_write_rle() in ghostscript This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs (CVE-2023-38559) ...
A buffer overflow flaw was found in base/gdevdevnc:1973 in devn_pcx_write_rle() in ghostscript This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs (CVE-2023-38559) ...
Description<!----> This CVE is under investigation by Red Hat Product Security ...