CVE-2015-3228
published 2015-08-11CVE-2015-3228: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service…
PriorityP430medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
3.75%
88.7th percentile
Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | afpl_ghostscript | <= 9.15 | — |
| artifex | ghostscript | >= 0 < 9.15~dfsg-1 | 9.15~dfsg-1 |
| artifex | ghostscript | >= 0 < 9.15~dfsg-1 | 9.15~dfsg-1 |
| artifex | ghostscript | >= 0 < 9.15~dfsg-1 | 9.15~dfsg-1 |
| artifex | ghostscript | >= 0 < 9.15~dfsg-1 | 9.15~dfsg-1 |
| debian | ghostscript | < ghostscript 9.15~dfsg-1 (bookworm) | ghostscript 9.15~dfsg-1 (bookworm) |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Ghostscript vulnerability
vendor_ubuntu·2015-07-30
CVE-2015-3228 Ghostscript vulnerability
Title: Ghostscript vulnerability
Summary: Ghostscript could be made to crash or run programs if it processed a
specially crafted file.
William Robinet and Stefan Cornelius discovered that Ghostscript did not
correctly handle certain Postscript files. If a user or automated system
were tricked into opening a specially crafted file, an attacker could cause
a denial of service or possibly execute arbitrary code.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
ghostscript-core: out-of-bounbds read and write in gs_ttf.ps
vendor_redhat·2015-07-23·CVSS 6.8
CVE-2015-3228 [MEDIUM] CWE-119 ghostscript-core: out-of-bounbds read and write in gs_ttf.ps
ghostscript-core: out-of-bounbds read and write in gs_ttf.ps
Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
An integer overflow flaw was discovered in one of Ghostscript's memory allocation routines. A remote attacker could possibly exploit this flaw to cause a crash or, potentially, execute arbitrary code by tricking a user into processing a specially crafted file.
Package: ghostscript (Red Hat Enterprise Linux 5) - Will not fix
Package: ghostscript (Red Hat Enterprise Linux 6) - Will not fix
Package: ghostscript (Red Hat Enterprise Linux 7)
Debian
CVE-2015-3228: ghostscript - Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghost...
vendor_debian·2015·CVSS 6.8
CVE-2015-3228 [MEDIUM] CVE-2015-3228: ghostscript - Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghost...
Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
Scope: local
bookworm: resolved (fixed in 9.15~dfsg-1)
bullseye: resolved (fixed in 9.15~dfsg-1)
forky: resolved (fixed in 9.15~dfsg-1)
sid: resolved (fixed in 9.15~dfsg-1)
trixie: resolved (fixed in 9.15~dfsg-1)
GHSA
GHSA-jf9j-9gh2-gp45: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc
ghsa_unreviewed·2022-05-17
CVE-2015-3228 [MEDIUM] GHSA-jf9j-9gh2-gp45: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc
Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
OSV
CVE-2015-3228: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc
osv·2015-08-11·CVSS 6.8
CVE-2015-3228 [MEDIUM] CVE-2015-3228: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc
Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
No detection rules found.
No public exploits indexed.
http://bugs.ghostscript.com/show_bug.cgi?id=696041http://bugs.ghostscript.com/show_bug.cgi?id=696070http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=0c0b0859http://openwall.com/lists/oss-security/2015/07/23/14http://www.debian.org/security/2015/dsa-3326http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlhttp://www.securityfocus.com/bid/76017http://www.securitytracker.com/id/1033149http://www.ubuntu.com/usn/USN-2697-1https://bugzilla.redhat.com/show_bug.cgi?id=1232805https://security.gentoo.org/glsa/201612-33http://bugs.ghostscript.com/show_bug.cgi?id=696041http://bugs.ghostscript.com/show_bug.cgi?id=696070http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=0c0b0859http://openwall.com/lists/oss-security/2015/07/23/14http://www.debian.org/security/2015/dsa-3326http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlhttp://www.securityfocus.com/bid/76017http://www.securitytracker.com/id/1033149http://www.ubuntu.com/usn/USN-2697-1https://bugzilla.redhat.com/show_bug.cgi?id=1232805https://security.gentoo.org/glsa/201612-33
2015-08-11
Published