CVE-2023-28879

2023-03-3100:00:00

ubuntu.com

0.003 Low

EPSS

Percentile

70.4%

JSON

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading
to potential corruption of data internal to the PostScript interpreter, in
base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode.
If the write buffer is filled to one byte less than full, and one then
tries to write an escaped character, two bytes are written.

Bugs

Notes

Author	Note
sbeattie	additional hardening upstream in commit 3635f4c75e (“PostScript filters - remove non-standard filters when SAFER is true”) consider applying as part of security fix
rodrigo-zaiden	hardening commit, 3635f4c75e, removes filters that are required for the old PDF interpreter written in PostScript. the new PDF interpreter written in C, is enabled by default in ghostscript 9.56.1. so, the hardening can break certain operations in older versions. in Ubuntu, the hardening is not applied is releases older than kinetic.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchghostscript< 9.26~dfsg+0-0ubuntu0.18.04.18UNKNOWN
ubuntu20.04noarchghostscript< 9.50~dfsg-5ubuntu4.7UNKNOWN
ubuntu22.04noarchghostscript< 9.55.0~dfsg1-0ubuntu5.2UNKNOWN
ubuntu22.10noarchghostscript< 9.56.1~dfsg1-0ubuntu3.1UNKNOWN
ubuntu23.04noarchghostscript< 10.0.0~dfsg1-0ubuntu1.1UNKNOWN
ubuntu16.04noarchghostscript< 9.26~dfsg+0-0ubuntu0.16.04.14+esm5) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	ghostscript	< 9.26~dfsg+0-0ubuntu0.18.04.18	UNKNOWN
ubuntu	20.04	noarch	ghostscript	< 9.50~dfsg-5ubuntu4.7	UNKNOWN
ubuntu	22.04	noarch	ghostscript	< 9.55.0~dfsg1-0ubuntu5.2	UNKNOWN
ubuntu	22.10	noarch	ghostscript	< 9.56.1~dfsg1-0ubuntu3.1	UNKNOWN
ubuntu	23.04	noarch	ghostscript	< 10.0.0~dfsg1-0ubuntu1.1	UNKNOWN
ubuntu	16.04	noarch	ghostscript	< 9.26~dfsg+0-0ubuntu0.16.04.14+esm5) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN