UBUNTU-CVE-2023-28879

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2023-28879

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-28879.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-28879

Related

Published

2023-03-31T17:15:00Z

Modified

2025-01-13T10:24:19Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.

References

Affected packages

Ubuntu:Pro:16.04:LTS / ghostscript

Package

Name: ghostscript
Purl: pkg:deb/ubuntu/ghostscript@9.26~dfsg+0-0ubuntu0.16.04.14+esm5?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.26~dfsg+0-0ubuntu0.16.04.14+esm5

Affected versions

9.*

9.16~dfsg~0-0ubuntu3

9.16~dfsg~0-0ubuntu4

9.18~dfsg~0-0ubuntu1

9.18~dfsg~0-0ubuntu2

9.18~dfsg~0-0ubuntu2.2

9.18~dfsg~0-0ubuntu2.3

9.18~dfsg~0-0ubuntu2.4

9.18~dfsg~0-0ubuntu2.6

9.18~dfsg~0-0ubuntu2.7

9.18~dfsg~0-0ubuntu2.8

9.18~dfsg~0-0ubuntu2.9

9.25~dfsg+1-0ubuntu0.16.04.1

9.25~dfsg+1-0ubuntu0.16.04.2

9.25~dfsg+1-0ubuntu0.16.04.3

9.26~dfsg+0-0ubuntu0.16.04.1

9.26~dfsg+0-0ubuntu0.16.04.3

9.26~dfsg+0-0ubuntu0.16.04.4

9.26~dfsg+0-0ubuntu0.16.04.5

9.26~dfsg+0-0ubuntu0.16.04.6

9.26~dfsg+0-0ubuntu0.16.04.7

9.26~dfsg+0-0ubuntu0.16.04.8

9.26~dfsg+0-0ubuntu0.16.04.9

9.26~dfsg+0-0ubuntu0.16.04.10

9.26~dfsg+0-0ubuntu0.16.04.11

9.26~dfsg+0-0ubuntu0.16.04.12

9.26~dfsg+0-0ubuntu0.16.04.13

9.26~dfsg+0-0ubuntu0.16.04.14

9.26~dfsg+0-0ubuntu0.16.04.14+esm1

9.26~dfsg+0-0ubuntu0.16.04.14+esm2

9.26~dfsg+0-0ubuntu0.16.04.14+esm3

9.26~dfsg+0-0ubuntu0.16.04.14+esm4

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "ghostscript-dbg"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "ghostscript-dbgsym"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "ghostscript-x"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "ghostscript-x-dbgsym"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "libgs-dev-dbgsym"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "libgs9"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "libgs9-common"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.14+esm5",
            "binary_name": "libgs9-dbgsym"
        }
    ]
}

Ubuntu:18.04:LTS / ghostscript

Package

Name: ghostscript
Purl: pkg:deb/ubuntu/ghostscript@9.26~dfsg+0-0ubuntu0.18.04.18?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.26~dfsg+0-0ubuntu0.18.04.18

Affected versions

9.*

9.21~dfsg+1-0ubuntu3

9.22~dfsg+1-0ubuntu1

9.22~dfsg+1-0ubuntu1.1

9.22~dfsg+1-0ubuntu1.2

9.25~dfsg+1-0ubuntu0.18.04.1

9.25~dfsg+1-0ubuntu0.18.04.2

9.26~dfsg+0-0ubuntu0.18.04.1

9.26~dfsg+0-0ubuntu0.18.04.3

9.26~dfsg+0-0ubuntu0.18.04.4

9.26~dfsg+0-0ubuntu0.18.04.5

9.26~dfsg+0-0ubuntu0.18.04.6

9.26~dfsg+0-0ubuntu0.18.04.7

9.26~dfsg+0-0ubuntu0.18.04.8

9.26~dfsg+0-0ubuntu0.18.04.9

9.26~dfsg+0-0ubuntu0.18.04.10

9.26~dfsg+0-0ubuntu0.18.04.11

9.26~dfsg+0-0ubuntu0.18.04.12

9.26~dfsg+0-0ubuntu0.18.04.13

9.26~dfsg+0-0ubuntu0.18.04.14

9.26~dfsg+0-0ubuntu0.18.04.15

9.26~dfsg+0-0ubuntu0.18.04.16

9.26~dfsg+0-0ubuntu0.18.04.17

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18",
            "binary_name": "ghostscript-dbg"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18",
            "binary_name": "ghostscript-x"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18",
            "binary_name": "libgs9"
        },
        {
            "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.18",
            "binary_name": "libgs9-common"
        }
    ]
}

Ubuntu:20.04:LTS / ghostscript

Package

Name: ghostscript
Purl: pkg:deb/ubuntu/ghostscript@9.50~dfsg-5ubuntu4.7?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.50~dfsg-5ubuntu4.7

Affected versions

9.*

9.27~dfsg+0-0ubuntu3

9.27~dfsg+0-0ubuntu4

9.50~dfsg-5ubuntu1

9.50~dfsg-5ubuntu2

9.50~dfsg-5ubuntu3

9.50~dfsg-5ubuntu4

9.50~dfsg-5ubuntu4.1

9.50~dfsg-5ubuntu4.2

9.50~dfsg-5ubuntu4.3

9.50~dfsg-5ubuntu4.4

9.50~dfsg-5ubuntu4.5

9.50~dfsg-5ubuntu4.6

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "9.50~dfsg-5ubuntu4.7",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.7",
            "binary_name": "ghostscript-dbg"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.7",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.7",
            "binary_name": "ghostscript-x"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.7",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.7",
            "binary_name": "libgs9"
        },
        {
            "binary_version": "9.50~dfsg-5ubuntu4.7",
            "binary_name": "libgs9-common"
        }
    ]
}

Ubuntu:22.04:LTS / ghostscript

Package

Name: ghostscript
Purl: pkg:deb/ubuntu/ghostscript@9.55.0~dfsg1-0ubuntu5.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.55.0~dfsg1-0ubuntu5.2

Affected versions

9.*

9.54.0~dfsg1-0ubuntu2

9.55.0~dfsg1-0ubuntu4

9.55.0~dfsg1-0ubuntu5

9.55.0~dfsg1-0ubuntu5.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "ghostscript"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "ghostscript-dbgsym"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "ghostscript-doc"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "ghostscript-x"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "ghostscript-x-dbgsym"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "libgs-dev"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "libgs9"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "libgs9-common"
        },
        {
            "binary_version": "9.55.0~dfsg1-0ubuntu5.2",
            "binary_name": "libgs9-dbgsym"
        }
    ]
}