USN-6433-1: Ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled certain PDF documents. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Ghostscript vulnerability?
The vulnerability ID for this Ghostscript vulnerability is USN-6433-1.
What is the impact of this Ghostscript vulnerability?
If a user or automated system opens a specially crafted PDF file, a remote attacker could execute arbitrary code.
Which version of Ghostscript is affected?
The versions 10.01.2~dfsg1-0ubuntu2.1, 10.0.0~dfsg1-0ubuntu1.4, 9.55.0~dfsg1-0ubuntu5.5, and 9.50~dfsg-5ubuntu4.11 of Ghostscript are affected.
How can I fix the Ghostscript vulnerability?
You can fix the Ghostscript vulnerability by updating the Ghostscript package to version 10.01.2~dfsg1-0ubuntu2.1 (for Ubuntu 23.10), 10.0.0~dfsg1-0ubuntu1.4 (for Ubuntu 23.04), 9.55.0~dfsg1-0ubuntu5.5 (for Ubuntu 22.04), or 9.50~dfsg-5ubuntu4.11 (for Ubuntu 20.04).
Where can I find more information about this Ghostscript vulnerability?
You can find more information about this Ghostscript vulnerability at the following references: [https://ubuntu.com/security/CVE-2023-43115](https://ubuntu.com/security/CVE-2023-43115), [https://launchpad.net/ubuntu/+source/ghostscript/10.01.2~dfsg1-0ubuntu2.1](https://launchpad.net/ubuntu/+source/ghostscript/10.01.2~dfsg1-0ubuntu2.1), [https://launchpad.net/ubuntu/+source/ghostscript/10.0.0~dfsg1-0ubuntu1.4](https://launchpad.net/ubuntu/+source/ghostscript/10.0.0~dfsg1-0ubuntu1.4).