CVE-2023-28879

2023-03-3117:15:06

Debian Security Bug Tracker

security-tracker.debian.org

0.003 Low

EPSS

Percentile

70.4%

JSON

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.

OSVersionArchitecturePackageVersionFilename
Debian12allghostscript< 10.0.0~dfsg-11ghostscript_10.0.0~dfsg-11_all.deb
Debian11allghostscript< 9.53.3~dfsg-7+deb11u4ghostscript_9.53.3~dfsg-7+deb11u4_all.deb
Debian10allghostscript< 9.27~dfsg-2+deb10u7ghostscript_9.27~dfsg-2+deb10u7_all.deb
Debian999allghostscript< 10.0.0~dfsg-11ghostscript_10.0.0~dfsg-11_all.deb
Debian13allghostscript< 10.0.0~dfsg-11ghostscript_10.0.0~dfsg-11_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ghostscript	< 10.0.0~dfsg-11	ghostscript_10.0.0~dfsg-11_all.deb
Debian	11	all	ghostscript	< 9.53.3~dfsg-7+deb11u4	ghostscript_9.53.3~dfsg-7+deb11u4_all.deb
Debian	10	all	ghostscript	< 9.27~dfsg-2+deb10u7	ghostscript_9.27~dfsg-2+deb10u7_all.deb
Debian	999	all	ghostscript	< 10.0.0~dfsg-11	ghostscript_10.0.0~dfsg-11_all.deb
Debian	13	all	ghostscript	< 10.0.0~dfsg-11	ghostscript_10.0.0~dfsg-11_all.deb