Detections
Analytics
GLSA-202309-03 : GPL Ghostscript: Multiple Vulnerabilities
critical Nessus Plugin ID 181507
Language:
Description
The remote host is affected by the vulnerability described in GLSA-202309-03 (GPL Ghostscript: Multiple Vulnerabilities)- A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an init_device_procs defined for the device that uses it as a prototype that depends upon the number of bits per pixel. For bpp > 64, mem_x_device is used and does not have an init_device_procs defined. This flaw allows an attacker to parse a large number of bits (more than 64 bits per pixel), which triggers a NULL pointer dereference flaw, causing an application to crash. (CVE-2022-2085)
- In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written. (CVE-2023-28879)
- Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix). (CVE-2023-36664)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
All GPL Ghostscript users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose >=app-text/ghostscript-gpl-10.01.2
See Also
https://security.gentoo.org/glsa/202309-03
Plugin Details
Severity: Critical
ID: 181507
File Name: gentoo_GLSA-202309-03.nasl
Version: 1.0
Type: local
Family: Gentoo Local Security Checks
Published: 9/17/2023
Updated: 9/17/2023
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.4
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2022-2085
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS Score Source: CVE-2023-28879
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:ghostscript-gpl, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/17/2023
Vulnerability Publication Date: 6/16/2022