Lucene search
Gentoo FoundationMGASA-2023-0260HistorySep 11, 2023 - 4:07 p.m.
Updated ghostscript packages fix security vulnerability
2023-09-1116:07:54
Gentoo Foundation
advisories.mageia.org
31
ghostscript
security vulnerability
permission validation
buffer overflow
pdf file
denial of service
devn device
unix
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
23.0%
Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix). (CVE-2023-36664) A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs. (CVE-2023-38559)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | ghostscript | < 9.53.3-2.6 | ghostscript-9.53.3-2.6.mga8 |
| Mageia | 9 | noarch | ghostscript | < 10.00.0-6.2 | ghostscript-10.00.0-6.2.mga9 |
Related
nessus
nessus
EulerOS 2.0 SP9 : ghostscript (EulerOS-SA-2023-2876)
2024-01-16 00:00:00
EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2023-2785)
2024-01-16 00:00:00
EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2023-2809)
2024-01-16 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2785)
2023-09-11 00:00:00
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2876)
2023-10-09 00:00:00
Mageia: Security Advisory (MGASA-2023-0260)
2023-09-11 00:00:00
githubexploit
githubexploit
Exploit for CVE-2023-36664
2024-04-09 22:05:29
Exploit for CVE-2023-36664
2023-08-12 18:33:57
Exploit for CVE-2023-36664
2023-12-02 10:28:10
fedora
fedora
[SECURITY] Fedora 37 Update: ghostscript-9.56.1-9.fc37
2023-08-16 00:38:48
[SECURITY] Fedora 38 Update: ghostscript-10.01.2-1.fc38
2023-07-16 01:27:12
[SECURITY] Fedora 38 Update: ghostscript-10.01.2-3.fc38
2023-08-12 04:26:43
amazon
amazon
Medium: ghostscript
2023-08-17 11:39:00
Important: ghostscript
2024-05-09 19:16:00
Medium: ghostscript
2023-08-17 11:57:00
osv
osv
ghostscript vulnerability
2023-08-17 13:53:47
CVE-2023-36664
2023-06-25 22:15:21
Important: ghostscript security update
2023-10-06 22:58:14
nvd
nvd
CVE-2023-38559
2023-08-01 17:15:09
CVE-2023-36664
2023-06-25 22:15:21
slackware
slackware
[slackware-security] ghostscript
2024-03-07 20:46:46
oraclelinux
oraclelinux
ghostscript security update
2023-10-06 00:00:00
ghostscript security and bug fix update
2023-11-11 00:00:00
ghostscript security and bug fix update
2023-11-17 00:00:00
cvelist
cvelist
CVE-2023-36664
2023-06-25 00:00:00
prion
prion
Design/Logic Flaw
2023-06-25 22:15:00
Buffer overflow
2023-08-01 17:15:00
cve
cve
CVE-2023-36664
2023-06-25 22:15:21
CVE-2023-38559
2023-08-01 17:15:09
ubuntucve
ubuntucve
CVE-2023-36664
2023-06-25 00:00:00
CVE-2023-38559
2023-08-01 00:00:00
debian
debian
[SECURITY] [DSA 5446-1] ghostscript security update
2023-07-03 20:10:41
[SECURITY] [DLA 3519-1] ghostscript security update
2023-08-07 14:06:09
ubuntu
ubuntu
Ghostscript vulnerability
2023-07-10 00:00:00
Ghostscript vulnerability
2023-08-17 00:00:00
redhatcve
redhatcve
CVE-2023-38559
2023-08-01 14:30:54
CVE-2023-36664
2023-06-27 06:47:22
veracode
veracode
Buffer Overflow
2023-08-20 21:02:06
Improper Input Validation
2023-07-19 23:22:53
wolfi
wolfi
CVE-2023-38559 vulnerabilities
2024-06-22 21:09:10
alpinelinux
alpinelinux
CVE-2023-38559
2023-08-01 17:15:09
CVE-2023-36664
2023-06-25 22:15:21
redos
redos
ROS-20230907-01
2023-09-07 00:00:00
ROS-20230911-05
2023-09-11 00:00:00
cgr
cgr
CVE-2023-38559 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2023-38559
2023-08-01 17:15:09
CVE-2023-36664
2023-06-25 22:15:21
redhat
redhat
(RHSA-2023:4324) Important: ghostscript security update
2023-07-31 08:17:10
(RHSA-2023:5459) Important: ghostscript security update
2023-10-05 10:11:33
(RHSA-2023:6544) Moderate: ghostscript security and bug fix update
2023-11-07 06:08:26
rocky
rocky
ghostscript security update
2023-10-06 22:58:14
rosalinux
rosalinux
Advisory ROSA-SA-2023-2318
2023-12-26 12:01:06
almalinux
almalinux
Important: ghostscript security update
2023-10-05 00:00:00
Moderate: ghostscript security and bug fix update
2023-11-07 00:00:00
Moderate: ghostscript security and bug fix update
2023-11-14 00:00:00
gentoo
gentoo
GPL Ghostscript: Multiple Vulnerabilities
2023-09-17 00:00:00
thn
thn
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
hp
hp
HP ThinPro 8.0 SP 7 Security Updates
2024-01-26 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
23.0%
Related for MGASA-2023-0260