PT-2023-8195 · Artifex+9 · Artifex Ghostscript+9

CVE-2023-46751 · Publicado 2023-11-01 · Atualizado 2025-05-15

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions through 10.02.0

Description An issue was discovered in the function gdev prn open printer seekable() that allows remote attackers to crash the application via a dangling pointer, which is related to the use of memory after it has been freed. This can lead to a denial of service.

Recommendations For Artifex Ghostscript versions through 10.02.0, as a temporary workaround, consider disabling the gdev prn open printer seekable() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALSA-2025:4362

ALSA-2025:7422

ALT-PU-2024-13477

ALT-PU-2024-14136

ALT-PU-2024-14302

BDU:2024-00187

CESA-2025_4362

CVE-2023-46751

DSA-5578-1

INFSA-2025_4362

INFSA-2025_7422

MGASA-2023-0351

OESA-2023-1984

OESA-2024-1016

OESA-2024-1055

OPENSUSE-SU-2023_4920-1

OPENSUSE-SU-2024:13548-1

RHSA-2025:4362

RHSA-2025:7422

RHSA-2025_4362

RHSA-2025_7422

SUSE-SU-2023:4917-1

SUSE-SU-2023:4920-1

SUSE-SU-2023_4917-1

SUSE-SU-2023_4920-1

USN-6551-1

Produtos afetados

Alt Linux

Almalinux

Artifex Ghostscript

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Referências · 66

• https://access.redhat.com/security/cve/CVE-2024-46951 · Nota
• https://bugzilla.redhat.com/2247179 · Nota
• https://lists.debian.org/debian-security-announce/2023/msg00274.html · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1016 · Nota
• https://bugzilla.redhat.com/2253365 · Nota
• https://errata.almalinux.org/8/ALSA-2025-4362.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-46751 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2023-1984 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-46751 · Nota de Segurança
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Aviso do Fabricante
• https://osv.dev/vulnerability/ALSA-2025:7422 · Aviso do Fabricante
• https://abf.rosa.ru/advisories/ROSA-SA-2025-3002 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:13548-1 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2023-0351.html · Nota de Segurança
• https://bugzilla.redhat.com/2325045 · Nota