PT-2023-8195 · Artifex+9 · Artifex Ghostscript+9

Published 2023-11-01 · Updated 2025-05-15 · CVE-2023-46751

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions through 10.02.0

Description An issue was discovered in the function gdev prn open printer seekable() that allows remote attackers to crash the application via a dangling pointer, which is related to the use of memory after it has been freed. This can lead to a denial of service.

Recommendations For Artifex Ghostscript versions through 10.02.0, as a temporary workaround, consider disabling the gdev prn open printer seekable() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025:4362

ALSA-2025:7422

ALT-PU-2024-13477

ALT-PU-2024-14136

ALT-PU-2024-14302

BDU:2024-00187

CESA-2025_4362

CVE-2023-46751

DSA-5578-1

INFSA-2025_4362

INFSA-2025_7422

MGASA-2023-0351

OESA-2023-1984

OESA-2024-1016

OESA-2024-1055

OPENSUSE-SU-2023_4920-1

OPENSUSE-SU-2024:13548-1

RHSA-2025:4362

RHSA-2025:7422

RHSA-2025_4362

RHSA-2025_7422

SUSE-SU-2023:4917-1

SUSE-SU-2023:4920-1

SUSE-SU-2023_4917-1

SUSE-SU-2023_4920-1

USN-6551-1

Affected Products

Alt Linux

Almalinux

Artifex Ghostscript

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 66

• https://osv.dev/vulnerability/SUSE-SU-2023:4920-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:4362 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-7422.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0351 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-7422.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:4362 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6551-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-46751 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13548-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2025-4362.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00187 · Security Note
• https://osv.dev/vulnerability/OESA-2023-1984 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-4362.html · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1055 · Vendor Advisory