Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 554
Alerts This Week
Warning Icon 1 554

Ubuntu 23.04 USN-6017-2 Critical: Ghostscript Denial Of Service Threat

ubuntu
Calendar Grey April 26, 2023
Dist Ubuntu Esm H88
The recent Ubuntu 23.04 release contains a vulnerability in Ghostscript which poses risks of system crashes or arbitrary code execution when handled with specially crafted input.
Ghostscript could be made to crash or run programs as your login if it received a specially crafted input.

Summary

Ghostscript could be made to crash or run programs as your login if it

received a specially crafted input.

Software Description:

- ghostscript: PostScript and PDF interpreter

Details:

USN-6017-1 fixed vulnerabilities in Ghostscript. This update provides the

corresponding updates for Ubuntu 23.04.

Original advisory details:

Hadrien Perrineau discovered that Ghostscript incorrectly handled certain

inputs. An attacker could possibly use this issue to cause a denial of

service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution ghostscript Ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   ghostscript                     10.0.0~dfsg1-0ubuntu1.1
   libgs10                         10.0.0~dfsg1-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6017-2

https://ubuntu.com/security/notices/USN-6017-1

CVE-2023-28879

Severity
critical
Lowest
Low
Medium
High
Critical

April 26, 2023

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution ghostscript Ubuntu

Package Information

https://launchpad.net/ubuntu/+source/ghostscript/10.0.0~dfsg1-0ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.