USN-6213-1: Ghostscript vulnerability
Published Jul 10, 2023
·Updated
It was discovered that Ghostscript incorrectly handled pipe devices. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code.
Affected Software
8 affected componentsFixes available
All of the following
ubuntu/ghostscript<10.0.0~dfsg1-0ubuntu1.2
10.0.0~dfsg1-0ubuntu1.2
Ubuntu Ubuntu=23.04
All of the following
ubuntu/ghostscript<9.56.1~dfsg1-0ubuntu3.2
9.56.1~dfsg1-0ubuntu3.2
Ubuntu Ubuntu=22.10
All of the following
ubuntu/ghostscript<9.55.0~dfsg1-0ubuntu5.3
9.55.0~dfsg1-0ubuntu5.3
Ubuntu Ubuntu=22.04
All of the following
ubuntu/ghostscript<9.50~dfsg-5ubuntu4.8
9.50~dfsg-5ubuntu4.8
Ubuntu Ubuntu=20.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/ghostscriptto a version that resolves this vulnerability.Fixed in 10.0.0~dfsg1-0ubuntu1.2 - Upgrade
Upgrade
ubuntu/ghostscriptto a version that resolves this vulnerability.Fixed in 9.56.1~dfsg1-0ubuntu3.2 - Upgrade
Upgrade
ubuntu/ghostscriptto a version that resolves this vulnerability.Fixed in 9.55.0~dfsg1-0ubuntu5.3 - Upgrade
Upgrade
ubuntu/ghostscriptto a version that resolves this vulnerability.Fixed in 9.50~dfsg-5ubuntu4.8
Event History
Jul 10, 2023
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software