Lucene search
Copyright (C) 2024 Greenbone AGOPENVAS:1361412562310833651HistoryMar 04, 2024 - 12:00 a.m.
openSUSE: Security Advisory for ghostscript (SUSE-SU-2023:3984-1)
2024-03-0400:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
9
opensuse
security advisory
ghostscript
suse-su-2023:3984-1
remote code execution
crafted postscript documents
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.006
Percentile
78.8%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.833651");
script_version("2024-05-16T05:05:35+0000");
script_cve_id("CVE-2023-43115");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"last_modification", value:"2024-05-16 05:05:35 +0000 (Thu, 16 May 2024)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2024-02-22 17:49:00 +0000 (Thu, 22 Feb 2024)");
script_tag(name:"creation_date", value:"2024-03-04 07:21:44 +0000 (Mon, 04 Mar 2024)");
script_name("openSUSE: Security Advisory for ghostscript (SUSE-SU-2023:3984-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2024 Greenbone AG");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=(openSUSELeap15\.4|openSUSELeap15\.5)");
script_xref(name:"Advisory-ID", value:"SUSE-SU-2023:3984-1");
script_xref(name:"URL", value:"https://lists.opensuse.org/archives/list/[email protected]/thread/D6G7TI73YMQOP4HU3OOWCBQOFI3IQUXF");
script_tag(name:"summary", value:"The remote host is missing an update for the 'ghostscript'
package(s) announced via the SUSE-SU-2023:3984-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"This update for ghostscript fixes the following issues:
* CVE-2023-43115: Fixed remote code execution via crafted PostScript documents
in gdevijs.c (bsc#1215466).");
script_tag(name:"affected", value:"'ghostscript' package(s) on openSUSE Leap 15.4, openSUSE Leap 15.5.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "openSUSELeap15.4") {
if(!isnull(res = isrpmvuln(pkg:"ghostscript-devel", rpm:"ghostscript-devel~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-debugsource", rpm:"ghostscript-debugsource~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-debuginfo", rpm:"ghostscript-debuginfo~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript", rpm:"ghostscript~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-x11-debuginfo", rpm:"ghostscript-x11-debuginfo~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-x11", rpm:"ghostscript-x11~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-devel", rpm:"ghostscript-devel~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-debugsource", rpm:"ghostscript-debugsource~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-debuginfo", rpm:"ghostscript-debuginfo~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript", rpm:"ghostscript~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-x11-debuginfo", rpm:"ghostscript-x11-debuginfo~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-x11", rpm:"ghostscript-x11~9.52~150000.173.2", rls:"openSUSELeap15.4"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "openSUSELeap15.5") {
if(!isnull(res = isrpmvuln(pkg:"ghostscript-devel", rpm:"ghostscript-devel~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-debugsource", rpm:"ghostscript-debugsource~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-debuginfo", rpm:"ghostscript-debuginfo~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript", rpm:"ghostscript~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-x11-debuginfo", rpm:"ghostscript-x11-debuginfo~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-x11", rpm:"ghostscript-x11~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-devel", rpm:"ghostscript-devel~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-debugsource", rpm:"ghostscript-debugsource~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-debuginfo", rpm:"ghostscript-debuginfo~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript", rpm:"ghostscript~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-x11-debuginfo", rpm:"ghostscript-x11-debuginfo~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ghostscript-x11", rpm:"ghostscript-x11~9.52~150000.173.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
nessus
nessus
RHEL 9 : ghostscript (RHSA-2023:5868)
2023-10-19 00:00:00
AlmaLinux 9 : ghostscript (ALSA-2023:6265)
2023-11-03 00:00:00
RHEL 9 : ghostscript (RHSA-2023:6732)
2023-11-07 00:00:00
redhat
redhat
(RHSA-2023:6732) Important: ghostscript security update
2023-11-07 09:44:55
(RHSA-2023:5868) Important: ghostscript security update
2023-10-18 22:00:17
(RHSA-2023:6265) Important: ghostscript security update
2023-11-02 09:15:53
openvas
openvas
Fedora: Security Advisory for ghostscript (FEDORA-2023-66d60c3df7)
2023-10-16 00:00:00
Fedora: Security Advisory (FEDORA-2023-c2665a9ff3)
2023-10-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3938-1)
2023-10-04 00:00:00
cvelist
cvelist
CVE-2023-43115
2023-09-18 00:00:00
debiancve
debiancve
CVE-2023-43115
2023-09-18 08:15:07
mageia
mageia
Updated ghostscript packages fix security vulnerability
2023-10-19 19:11:51
cgr
cgr
CVE-2023-43115 vulnerabilities
2024-05-19 03:07:16
oraclelinux
oraclelinux
ghostscript security update
2023-11-16 00:00:00
ghostscript security update
2023-11-03 00:00:00
osv
osv
Important: ghostscript security update
2023-11-02 00:00:00
CVE-2023-43115
2023-09-18 08:15:07
ghostscript vulnerability
2023-10-17 11:40:37
nvd
nvd
CVE-2023-43115
2023-09-18 08:15:07
cve
cve
CVE-2023-43115
2023-09-18 08:15:07
ubuntu
ubuntu
Ghostscript vulnerability
2023-10-17 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: ghostscript-10.01.2-4.fc38
2023-10-15 01:44:26
[SECURITY] Fedora 39 Update: ghostscript-10.01.2-4.fc39
2023-10-16 15:27:49
almalinux
almalinux
Important: ghostscript security update
2023-11-02 00:00:00
Important: ghostscript security update
2023-11-07 00:00:00
alpinelinux
alpinelinux
CVE-2023-43115
2023-09-18 08:15:07
ubuntucve
ubuntucve
CVE-2023-43115
2023-09-18 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2023-10-08 05:37:24
redhatcve
redhatcve
CVE-2023-43115
2023-09-28 06:54:29
prion
prion
Remote code execution
2023-09-18 08:15:00
wolfi
wolfi
CVE-2023-43115 vulnerabilities
2024-09-28 21:12:41
githubexploit
githubexploit
Exploit for CVE-2023-43115
2023-09-28 17:30:06
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.006
Percentile
78.8%
Related for OPENVAS:1361412562310833651