PT-2025-11336 · Debian+6 · Debian+6

Published 2024-11-12 · Updated 2025-08-06 · CVE-2025-27831

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Debian Linux (affected versions not specified) ghostscript (affected versions not specified)

Description The issue concerns a text buffer overflow with long characters in the DOCXWRITE and TXTWRITE devices.

Recommendations For Debian Linux, update the ghostscript package to a version that includes the fix for this issue. For ghostscript, apply the necessary patches or configuration changes to prevent the text buffer overflow in the DOCXWRITE and TXTWRITE devices. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2025-8484

ALT-PU-2025-9591

BDU:2025-03711

CVE-2025-27831

DLA-4118-1

DSA-5888-1

MGASA-2025-0098

OESA-2025-1398

OESA-2025-1399

OESA-2025-1400

OESA-2025-1401

OPENSUSE-SU-2025:14953-1

OPENSUSE-SU-2025_1127-1

SUSE-SU-2025:1118-1

SUSE-SU-2025:1127-1

SUSE-SU-2025_1118-1

SUSE-SU-2025_1127-1

USN-7378-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Suse

Ubuntu

Ghostscript

References · 74

• https://osv.dev/vulnerability/MGASA-2025-0098 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4118-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-27831 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1127-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7378-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1400 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-27835 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7378-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-27832 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/719264 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-27831 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03711 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-27831 · Vendor Advisory