Bug 2224367 (CVE-2023-38559)

Summary: CVE-2023-38559 ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS
Product: [Other] Security Response Reporter: Michael Kaplan <mkaplan>
Component: vulnerabilityAssignee: Nobody <nobody>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: security-response-team
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2224371, 2224372, 2224373, 2224374, 2225380, 2228122    
Bug Blocks: 2224370    

Description Michael Kaplan 2023-07-20 14:43:26 UTC
A buffer overflow vulnerability in base/gdevdevn.c:1973 in devn_pcx_write_rle() allows a local attacker to cause a denial of service via a crafted PDF file and outputing it for DEVN device with gs.

Comment 3 TEJ RATHI 2023-07-25 07:05:56 UTC
Created ghostscript tracking bugs for this issue:

Affects: fedora-all [bug 2225380]

Comment 5 errata-xmlrpc 2023-11-07 08:19:17 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:6544 https://access.redhat.com/errata/RHSA-2023:6544

Comment 6 errata-xmlrpc 2023-11-14 15:19:26 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:7053 https://access.redhat.com/errata/RHSA-2023:7053