- Vulnerability/
- USN-6297-1
USN-6297-1: Ghostscript vulnerability
First published: Thu Aug 17 2023(Updated: )
It was discovered that Ghostscript incorrectly handled outputting certain PDF files. A local attacker could potentially use this issue to cause a crash, resulting in a denial of service.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/ghostscript | <10.0.0~dfsg1-0ubuntu1.3 | 10.0.0~dfsg1-0ubuntu1.3 |
| =23.04 | ||
| All of | ||
| ubuntu/libgs10 | <10.0.0~dfsg1-0ubuntu1.3 | 10.0.0~dfsg1-0ubuntu1.3 |
| =23.04 | ||
| All of | ||
| ubuntu/ghostscript | <9.55.0~dfsg1-0ubuntu5.4 | 9.55.0~dfsg1-0ubuntu5.4 |
| =22.04 | ||
| All of | ||
| ubuntu/libgs9 | <9.55.0~dfsg1-0ubuntu5.4 | 9.55.0~dfsg1-0ubuntu5.4 |
| =22.04 | ||
| All of | ||
| ubuntu/ghostscript | <9.50~dfsg-5ubuntu4.9 | 9.50~dfsg-5ubuntu4.9 |
| =20.04 | ||
| All of | ||
| ubuntu/libgs9 | <9.50~dfsg-5ubuntu4.9 | 9.50~dfsg-5ubuntu4.9 |
| =20.04 | ||
| All of | ||
| ubuntu/ghostscript | <9.26~dfsg+0-0ubuntu0.18.04.18+esm1 | 9.26~dfsg+0-0ubuntu0.18.04.18+esm1 |
| =18.04 | ||
| All of | ||
| ubuntu/libgs9 | <9.26~dfsg+0-0ubuntu0.18.04.18+esm1 | 9.26~dfsg+0-0ubuntu0.18.04.18+esm1 |
| =18.04 | ||
| All of | ||
| ubuntu/ghostscript | <9.26~dfsg+0-0ubuntu0.16.04.14+esm6 | 9.26~dfsg+0-0ubuntu0.16.04.14+esm6 |
| =16.04 | ||
| All of | ||
| ubuntu/libgs9 | <9.26~dfsg+0-0ubuntu0.16.04.14+esm6 | 9.26~dfsg+0-0ubuntu0.16.04.14+esm6 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2023-38559
- https://launchpad.net/ubuntu/+source/ghostscript/10.0.0~dfsg1-0ubuntu1.3
- https://launchpad.net/ubuntu/+source/ghostscript/9.55.0~dfsg1-0ubuntu5.4
- https://launchpad.net/ubuntu/+source/ghostscript/9.50~dfsg-5ubuntu4.9
- https://ubuntu.com/security/notices/USN-6297-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this Ghostscript vulnerability?
The vulnerability ID for this Ghostscript vulnerability is CVE-2023-38559.
What software is affected by this Ghostscript vulnerability?
The software affected by this Ghostscript vulnerability is Ghostscript and libgs10 for Ubuntu 23.04, Ghostscript and libgs9 for Ubuntu 22.04, Ghostscript and libgs9 for Ubuntu 20.04, Ghostscript and libgs9 for Ubuntu 18.04, Ghostscript and libgs9 for Ubuntu 16.04.
What is the impact severity of this Ghostscript vulnerability?
The impact severity of this Ghostscript vulnerability is a denial of service.
How can I fix the Ghostscript vulnerability?
To fix the Ghostscript vulnerability, update the affected software to the recommended versions: ghostscript 10.0.0~dfsg1-0ubuntu1.3 for Ubuntu 23.04, ghostscript 9.55.0~dfsg1-0ubuntu5.4 for Ubuntu 22.04, ghostscript 9.50~dfsg-5ubuntu4.9 for Ubuntu 20.04, ghostscript 9.26~dfsg+0-0ubuntu0.18.04.18+esm1 for Ubuntu 18.04, ghostscript 9.26~dfsg+0-0ubuntu0.16.04.14+esm6 for Ubuntu 16.04.
Where can I find more information about this Ghostscript vulnerability?
You can find more information about this Ghostscript vulnerability on the Ubuntu Security Notices and Launchpad websites. The links are provided in the description.
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/title
- agent/references
- agent/tags
- agent/description
- agent/event
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/23.04
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04