PT-2023-8785 · Unknown+3 · Ghostscript+3

Pedro Sampaio · Published 2023-08-23 · Updated 2023-12-27 · CVE-2023-4042

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ghostscript versions (affected versions not specified)

Description A flaw was found in ghostscript, related to a buffer overflow issue. This issue affects the ghostscript package as shipped with Red Hat Enterprise Linux 8. Exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALSA-2023:7053

BDU:2024-01903

CESA-2023_7053

CVE-2023-4042

RHSA-2023:7053

RHSA-2023_7053

Affected Products

Almalinux

Centos

Ghostscript

Red Hat

References · 24

• https://access.redhat.com/errata/RHSA-2023:7053 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-7053.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4042 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07662 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4042 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38559 · Security Note
• https://osv.dev/vulnerability/ALSA-2023:7053 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28879 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/691635 · Security Note
• https://bdu.fstec.ru/vul/2023-02055 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4042 · Security Note
• https://bdu.fstec.ru/vul/2024-01903 · Security Note
• https://errata.almalinux.org/8/ALSA-2023-7053.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-38559 · Note
• https://access.redhat.com/security/cve/CVE-2023-4042 · Note