CVE-2015-3228
published 2015-08-11CVE-2015-3228: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service…
medium6.8CVSS 3.1
AVNACMAuNCPIPAP
Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | afpl_ghostscript | <= 9.15 | — |
| artifex | ghostscript | >= 0 < 9.15~dfsg-1 | 9.15~dfsg-1 |
| artifex | ghostscript | >= 0 < 9.15~dfsg-1 | 9.15~dfsg-1 |
| artifex | ghostscript | >= 0 < 9.15~dfsg-1 | 9.15~dfsg-1 |
| artifex | ghostscript | >= 0 < 9.15~dfsg-1 | 9.15~dfsg-1 |
| debian | ghostscript | < ghostscript 9.15~dfsg-1 (bookworm) | ghostscript 9.15~dfsg-1 (bookworm) |
CVSS provenance
nvd6.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM