PT-2024-6394 · Artifex+6 · Artifex Ghostscript+6

Chris Liddell · Published 2024-04-27 · Updated 2025-06-23 · CVE-2023-52722

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.03.1

Description The issue is related to the incorrect input validation in the psi/zmisc1.c file of the Artifex Ghostscript software. This can allow a remote attacker to execute arbitrary code. The problem occurs when SAFER mode is used, allowing eexec seeds other than the Type 1 standard.

Recommendations

• Update Artifex Ghostscript to version 10.03.1 immediately to address the issue.
• Audit systems to ensure no unauthorized access or file modifications have occurred.
• If Artifex Ghostscript is used in web services, ensure that these services are also updated.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2024-13477

ALT-PU-2024-14136

ALT-PU-2024-14302

BDU:2024-07479

CVE-2023-52722

DSA-5692-1

MGASA-2024-0180

OESA-2024-2176

OESA-2024-2178

OPENSUSE-SU-2024:14090-1

OPENSUSE-SU-2024_1590-1

OPENSUSE-SU-2024_1590-2

SUSE-SU-2024:1568-1

SUSE-SU-2024:1590-1

SUSE-SU-2024:1590-2

SUSE-SU-2024_1568-1

SUSE-SU-2024_1590-1

SUSE-SU-2024_1590-2

USN-6835-1

Affected Products

Alt Linux

Artifex Ghostscript

Astra Linux

Linuxmint

Red Os

Suse

Ubuntu

References · 62

• https://advisories.mageia.org/MGASA-2024-0180.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-33869 · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0180 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-2178 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07479 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52722 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2023-52722 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5692-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52722 · Security Note
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1 · Patch
• https://osv.dev/vulnerability/OESA-2024-2176 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-52722 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52722 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1590-2 · Vendor Advisory