REDHAT-BUG-2235001: Divide by Zero

Published Aug 25, 2023

Updated

A divide by zero issue discovered in epsprintpage in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

References:

https://bugs.ghostscript.com/showbug.cgi?id=701843 https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=4e713293de84b689c4ab358f3e110ea54aa81925

Affected Software

1 affected component

Artifex Software GhostScript

Event History

Aug 25, 2023

Data Sourced

via Red Hat·09:22 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2235001?

The severity of REDHAT-BUG-2235001 is classified as a denial of service vulnerability.

How can I mitigate the risk associated with REDHAT-BUG-2235001?

To mitigate the risk of REDHAT-BUG-2235001, avoid opening untrusted or crafted PDF files using GhostScript.

What systems are affected by REDHAT-BUG-2235001?

REDHAT-BUG-2235001 affects Artifex Software GhostScript, specifically version 9.50.

What type of attack does REDHAT-BUG-2235001 enable?

REDHAT-BUG-2235001 enables remote attackers to cause a denial of service.

Will updating GhostScript fix REDHAT-BUG-2235001?

Yes, updating GhostScript to the patched version will fix the divide by zero issue identified in REDHAT-BUG-2235001.