CVE-2023-46751: Use After Free
Published Dec 6, 2023
·Updated
An issue was discovered in the function gdevprnopenprinterseekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
Affected Software
7 affected componentsFixes available
ubuntu/ghostscript<9.55.0~dfsg1-0ubuntu5.6
9.55.0~dfsg1-0ubuntu5.6
ubuntu/ghostscript<10.0.0~dfsg1-0ubuntu1.5
10.0.0~dfsg1-0ubuntu1.5
ubuntu/ghostscript<10.01.2~dfsg1-0ubuntu2.2
10.01.2~dfsg1-0ubuntu2.2
ubuntu/ghostscript<10.02.1~dfsg-1
10.02.1~dfsg-1
debian/ghostscript
9.27~dfsg-2+deb10u59.27~dfsg-2+deb10u99.53.3~dfsg-7+deb11u69.53.3~dfsg-7+deb11u510.0.0~dfsg-11+deb12u310.02.1~dfsg-3
Artifex GhostScript<=10.02.0
redhat/ghostscript<10.02.1
10.02.1
Remediation
Event History
Dec 6, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via Red Hat·10:00 PM
DescriptionSeverityAffected Software
Jan 12, 2024
Data Sourced
via Launchpad·12:26 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-46751.
2
What is the title of the vulnerability?
The title of the vulnerability is 'An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.'
3
What is the affected software?
The affected software is Artifex Ghostscript version up to and including 10.02.0.
4
What is the severity of the vulnerability?
The severity of the vulnerability is high with a CVSS score of 7.5.
5
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to update to a version of Artifex Ghostscript that is not affected.