CVE-2023-46751 An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ghostscript(Debian:12) | < 10.0.0~dfsg-11+deb12u3 | 10.0.0~dfsg-11+deb12u3 |
| debian/ghostscript(Debian:12) | = 10.0.0~dfsg-11 | No fix listed |
| debian/ghostscript(Debian:12) | = 10.0.0~dfsg-11+deb12u1 | No fix listed |
| debian/ghostscript(Debian:12) | = 10.0.0~dfsg-11+deb12u2 | No fix listed |
| debian/ghostscript(Debian:13) | < 10.02.1~dfsg-1 | 10.02.1~dfsg-1 |
| debian/ghostscript(Debian:14) | < 10.02.1~dfsg-1 | 10.02.1~dfsg-1 |
| ubuntu/ghostscript(Ubuntu:22.04) | < 9.55.0~dfsg1-0ubuntu5.6 | 9.55.0~dfsg1-0ubuntu5.6 |
| ubuntu/ghostscript(Ubuntu:24.04) | < 10.02.1~dfsg1-0ubuntu1 | 10.02.1~dfsg1-0ubuntu1 |
| artifex ghostscript | <= 10.02.0 | No fix listed |
References
- Debian Security Tracker CVE-2023-46751 vendor-advisory
- ghostscript.com product
- git.ghostscript.com broken-link
- bugs.ghostscript.com permissions-required
- DSA-5578 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-6551-1 vendor-advisory
- www.cve.org