Wind River Support Network

HomeDefectsLIN1021-6203
Fixed

LIN1021-6203 : Security Advisory - ghostscript - CVE-2023-38559

Created: Aug 1, 2023    Updated: Aug 10, 2023
Resolved Date: Aug 10, 2023
Found In Version: 10.21.20.1
Fix Version: 10.21.20.19
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.

CREATE(Triage):(User=admin) CVE-2023-38559 (https://nvd.nist.gov/vuln/detail/CVE-2023-38559)

CVEs


Live chat
Online