CVE-2023-38560
published 2023-08-01CVE-2023-38560: An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service…
medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | ghostscript | >= 0 < 10.02.0~dfsg-1 | 10.02.0~dfsg-1 |
| artifex | ghostscript | >= 0 < 10.02.0~dfsg-1 | 10.02.0~dfsg-1 |
| debian | ghostscript | < ghostscript 10.02.0~dfsg-1 (forky) | ghostscript 10.02.0~dfsg-1 (forky) |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM