UBUNTU-CVE-2023-38560
- Source
- https://ubuntu.com/security/CVE-2023-38560
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-38560.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2023-38560
- Upstream
- Published
- 2023-08-01T17:15:00Z
- Modified
- 2025-12-04T08:24:31.663357Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Ubuntu - negligible
- Summary
- [none]
- Details
-
An integer overflow flaw was found in pcl/pl/plfont.c:418 in plglyphname in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format.
- References
Affected packages
Ubuntu:Pro:20.04:LTS / ghostscript
Package
- Name
- ghostscript
- Purl
- pkg:deb/ubuntu/ghostscript@9.50~dfsg-5ubuntu4.15+esm2?arch=source&distro=esm-infra/focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
9.*
9.27~dfsg+0-0ubuntu3
9.27~dfsg+0-0ubuntu4
9.50~dfsg-5ubuntu1
9.50~dfsg-5ubuntu2
9.50~dfsg-5ubuntu3
9.50~dfsg-5ubuntu4
9.50~dfsg-5ubuntu4.1
9.50~dfsg-5ubuntu4.2
9.50~dfsg-5ubuntu4.3
9.50~dfsg-5ubuntu4.4
9.50~dfsg-5ubuntu4.5
9.50~dfsg-5ubuntu4.6
9.50~dfsg-5ubuntu4.7
9.50~dfsg-5ubuntu4.8
9.50~dfsg-5ubuntu4.9
9.50~dfsg-5ubuntu4.10
9.50~dfsg-5ubuntu4.11
9.50~dfsg-5ubuntu4.12
9.50~dfsg-5ubuntu4.13
9.50~dfsg-5ubuntu4.14
9.50~dfsg-5ubuntu4.15
9.50~dfsg-5ubuntu4.15+esm1
9.50~dfsg-5ubuntu4.15+esm2
Ecosystem specific
{
"binaries": [
{
"binary_name": "ghostscript",
"binary_version": "9.50~dfsg-5ubuntu4.15+esm2"
},
{
"binary_name": "ghostscript-x",
"binary_version": "9.50~dfsg-5ubuntu4.15+esm2"
},
{
"binary_name": "libgs-dev",
"binary_version": "9.50~dfsg-5ubuntu4.15+esm2"
},
{
"binary_name": "libgs9",
"binary_version": "9.50~dfsg-5ubuntu4.15+esm2"
},
{
"binary_name": "libgs9-common",
"binary_version": "9.50~dfsg-5ubuntu4.15+esm2"
}
],
"priority_reason": "PCL is not built by default, some releases don't include pcl/ dir"
}