CVE-2023-43115: Critical severity Artifex Ghostscript vulnerability
In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).
Other sources
In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated.
References: https://bugs.ghostscript.com/showbug.cgi?id=707051 https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5 https://ghostscript.com/
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-43115?
CVE-2023-43115 is a vulnerability in Artifex Ghostscript through 10.01.2.
How severe is CVE-2023-43115?
CVE-2023-43115 has a severity rating of 9.8 (critical).
How does CVE-2023-43115 lead to remote code execution?
CVE-2023-43115 allows remote code execution via crafted PostScript documents by switching to the IJS device after SAFER has been activated.
How can I check if my version of Ghostscript is affected?
If you are using Artifex Ghostscript version up to and including 10.01.2, your version is affected.
Is there a fix for CVE-2023-43115?
Yes, updating Artifex Ghostscript to a version higher than 10.01.2 will fix the vulnerability.