Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 8: 2023-0456 Severe Ghostscript Memory Corruption Notice

mageia
Calendar Grey April 11, 2023
Dist Mageia Esm H88
Mageia 8 rolls out Ghostscript patch addressing severe buffer overflow vulnerability, enhancing data integrity and system safety.
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c

Summary

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written. (CVE-2023-28879)

References

- https://bugs.mageia.org/show_bug.cgi?id=31758

- https://lists.debian.org/debian-lts-announce/2023/04/msg00003.html

- https://www.cve.org/CVERecord?id=CVE-2023-28879

Topics%20covered

Topics Covered

security advisory buffer overflow critical Ghostscript Mageia

Resolution

SRPMS

- 8/core/ghostscript-9.53.3-2.4.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 11 Apr 2023
URL: https://advisories.mageia.org/MGASA-2023-0134.html
Type: security
CVE: CVE-2023-28879

Topics%20covered

Topics Covered

security advisory buffer overflow critical Ghostscript Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here