PT-2022-7198 · Ghostpcl+3 · Ghostpcl+3

Patchkey · Published 2022-04-12 · Updated 2022-04-23 · CVE-2022-1350

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GhostPCL version 9.55.0 Ghostscript version 9.55.0

Description A problematic vulnerability was found in the function chunk free object of the file gsmchunk.c. This issue is related to a buffer overflow. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction.

Recommendations For GhostPCL version 9.55.0, apply the patches to fix this issue. For Ghostscript version 9.55.0, apply the patches to fix this issue. As a temporary workaround, consider disabling the chunk free object function until a patch is available.

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

BDU:2023-09081

CVE-2022-1350

Affected Products

Astra Linux

Debian

Ghostpcl

Ghostscript

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2022-1350 · Security Note
• https://bdu.fstec.ru/vul/2023-09081 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-1350 · Vendor Advisory
• https://bugs.ghostscript.com/show_bug.cgi?id=705156 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1350 · Vendor Advisory
• https://bugs.ghostscript.com/attachment.cgi?id=22323 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-1350 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16 · Vendor Advisory
• https://vuldb.com/?id.197290 · Note
• https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e1134d375e2ca176068e19a2aa9b040baffe1c22 · Note
• https://altsp.su/obnovleniya-bezopasnosti · Note
• https://github.com/advisories/GHSA-jpg4-pmwv-rq38 · Note
• https://t.me/cibsecurity/40749 · Telegram Post