CVE catalog

CVE-2023-28879

ghostscript: CVE-2023-28879

[CVE catalog]

Severity
High · CVSS 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
6.34% · Oct 25, 2026

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written. ghostscript: buffer overflow in base/sbcp.c leading to data corruption The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianghostscriptsid10.08.0~dfsg-2fixed
Debianghostscriptforky10.08.0~dfsg-2fixed
Debianghostscripttrixie10.05.1~dfsg-1+deb13u1fixed
Debianghostscripttrixie-security10.05.1~dfsg-1+deb13u3fixed
Debianghostscriptbookworm10.0.0~dfsg-11+deb12u8fixed
Debianghostscriptbookworm-security10.0.0~dfsg-11+deb12u8fixed
Alpineghostscript3.149.54.0-r2fixed
Alpineghostscript3.159.55.0-r1fixed
Alpineghostscript3.169.56.1-r1fixed
Alpineghostscript3.1710.0.0-r1fixed
Ubuntughostscriptpro9.16~dfsg~0-0ubuntu3vulnerable
Ubuntughostscriptpro9.16~dfsg~0-0ubuntu4vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu1vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.2vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.3vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.4vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.6vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.7vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.8vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.9vulnerable
Ubuntughostscriptpro9.25~dfsg+1-0ubuntu0.16.04.1vulnerable
Ubuntughostscriptpro9.25~dfsg+1-0ubuntu0.16.04.2vulnerable
Ubuntughostscriptpro9.25~dfsg+1-0ubuntu0.16.04.3vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.1vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.3vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.4vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.5vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.6vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.7vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.8vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.9vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.10vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.11vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.12vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.13vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm1vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm2vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm3vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm4vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm5fixed
Ubuntughostscript18.049.21~dfsg+1-0ubuntu3vulnerable
Ubuntughostscript18.049.22~dfsg+1-0ubuntu1vulnerable
Ubuntughostscript18.049.22~dfsg+1-0ubuntu1.1vulnerable
Ubuntughostscript18.049.22~dfsg+1-0ubuntu1.2vulnerable
Ubuntughostscript18.049.25~dfsg+1-0ubuntu0.18.04.1vulnerable
Ubuntughostscript18.049.25~dfsg+1-0ubuntu0.18.04.2vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.1vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.3vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.4vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.5vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.6vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.7vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.8vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.9vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.10vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.11vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.12vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.13vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.14vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.15vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.16vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.17vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.18fixed
Ubuntughostscript20.049.27~dfsg+0-0ubuntu3vulnerable
Ubuntughostscript20.049.27~dfsg+0-0ubuntu4vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu1vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu2vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu3vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.1vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.2vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.3vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.4vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.5vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.6vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.7fixed
Ubuntughostscript22.049.54.0~dfsg1-0ubuntu2vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu4vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.1vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.2fixed
Ubuntughostscriptpro9.16~dfsg~0-0ubuntu3vulnerable
Ubuntughostscriptpro9.16~dfsg~0-0ubuntu4vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu1vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.2vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.3vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.4vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.6vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.7vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.8vulnerable
Ubuntughostscriptpro9.18~dfsg~0-0ubuntu2.9vulnerable
Ubuntughostscriptpro9.25~dfsg+1-0ubuntu0.16.04.1vulnerable
Ubuntughostscriptpro9.25~dfsg+1-0ubuntu0.16.04.2vulnerable
Ubuntughostscriptpro9.25~dfsg+1-0ubuntu0.16.04.3vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.1vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.3vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.4vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.5vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.6vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.7vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.8vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.9vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.10vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.11vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.12vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.13vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm1vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm2vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm3vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm4vulnerable
Ubuntughostscriptpro9.26~dfsg+0-0ubuntu0.16.04.14+esm5fixed
Ubuntughostscript18.049.21~dfsg+1-0ubuntu3vulnerable
Ubuntughostscript18.049.22~dfsg+1-0ubuntu1vulnerable
Ubuntughostscript18.049.22~dfsg+1-0ubuntu1.1vulnerable
Ubuntughostscript18.049.22~dfsg+1-0ubuntu1.2vulnerable
Ubuntughostscript18.049.25~dfsg+1-0ubuntu0.18.04.1vulnerable
Ubuntughostscript18.049.25~dfsg+1-0ubuntu0.18.04.2vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.1vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.3vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.4vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.5vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.6vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.7vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.8vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.9vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.10vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.11vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.12vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.13vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.14vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.15vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.16vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.17vulnerable
Ubuntughostscript18.049.26~dfsg+0-0ubuntu0.18.04.18fixed
Ubuntughostscript20.049.27~dfsg+0-0ubuntu3vulnerable
Ubuntughostscript20.049.27~dfsg+0-0ubuntu4vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu1vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu2vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu3vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.1vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.2vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.3vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.4vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.5vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.6vulnerable
Ubuntughostscript20.049.50~dfsg-5ubuntu4.7fixed
Ubuntughostscript22.049.54.0~dfsg1-0ubuntu2vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu4vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.1vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.2fixed
Opensuseghostscripttumbleweed9.56.1-2.1fixed
Suseghostscriptopenstack cloud 99.52-23.51.1fixed
Suseghostscriptopenstack cloud crowbar 99.52-23.51.1fixed
Suseghostscriptlinux enterprise server for sap applications 12 sp49.52-23.51.1fixed
Suseghostscriptlinux enterprise software development kit 12 sp59.52-23.51.1fixed
Suseghostscriptlinux enterprise server 12 sp2-bcl9.52-23.51.1fixed
Suseghostscriptlinux enterprise server 12 sp4-espos9.52-23.51.1fixed
Suseghostscriptlinux enterprise server 12 sp4-ltss9.52-23.51.1fixed
Suseghostscriptlinux enterprise server 12 sp59.52-23.51.1fixed
Suseghostscriptlinux enterprise server for sap applications 12 sp59.52-23.51.1fixed
Suseghostscriptlinux enterprise module for basesystem 15 sp49.52-150000.164.1fixed
Suseghostscriptlinux enterprise high performance computing 15 sp1-ltss9.52-150000.164.1fixed
Suseghostscriptlinux enterprise high performance computing 15 sp2-ltss9.52-150000.164.1fixed
Suseghostscriptlinux enterprise high performance computing 15 sp3-espos9.52-150000.164.1fixed
Suseghostscriptlinux enterprise high performance computing 15 sp3-ltss9.52-150000.164.1fixed
Suseghostscriptlinux enterprise real time 15 sp39.52-150000.164.1fixed
Suseghostscriptlinux enterprise server 15 sp1-ltss9.52-150000.164.1fixed
Suseghostscriptlinux enterprise server 15 sp2-ltss9.52-150000.164.1fixed
Suseghostscriptlinux enterprise server 15 sp3-ltss9.52-150000.164.1fixed
Suseghostscriptlinux enterprise server for sap applications 15 sp19.52-150000.164.1fixed
Suseghostscriptlinux enterprise server for sap applications 15 sp29.52-150000.164.1fixed
Suseghostscriptlinux enterprise server for sap applications 15 sp39.52-150000.164.1fixed
Suseghostscriptmanager proxy 4.29.52-150000.164.1fixed
Suseghostscriptmanager server 4.29.52-150000.164.1fixed
Suseghostscriptenterprise storage 79.52-150000.164.1fixed
Suseghostscriptenterprise storage 7.19.52-150000.164.1fixed
Opensuseghostscriptleap 15.49.52-150000.164.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianghostscriptsourcesid10.0.0~dfsg-11not yet assignedNot reported[1033757]
Debianghostscriptsourceforky10.0.0~dfsg-11not yet assignedNot reported[1033757]
Debianghostscriptsourcetrixie10.0.0~dfsg-11not yet assignedNot reported[1033757]
Debianghostscriptsourcebookworm10.0.0~dfsg-11not yet assignedNot reported[1033757]
Alpineghostscriptapk3.149.54.0-r2Not reportedALPINE-CVE-2023-28879Not reported
Alpineghostscriptapk3.159.55.0-r1Not reportedALPINE-CVE-2023-28879Not reported
Alpineghostscriptapk3.169.56.1-r1Not reportedALPINE-CVE-2023-28879Not reported
Alpineghostscriptapk3.1710.0.0-r1Not reportedALPINE-CVE-2023-28879Not reported
Ubuntughostscriptdebpro9.26~dfsg+0-0ubuntu0.16.04.14+esm5Not reportedUSN-6017-1Not reported
Ubuntughostscriptdeb18.049.26~dfsg+0-0ubuntu0.18.04.18Not reportedUSN-6017-1Not reported
Ubuntughostscriptdeb20.049.50~dfsg-5ubuntu4.7Not reportedUSN-6017-1Not reported
Ubuntughostscriptdeb22.049.55.0~dfsg1-0ubuntu5.2Not reportedUSN-6017-1Not reported
Ubuntughostscriptdebpro9.26~dfsg+0-0ubuntu0.16.04.14+esm5Not reportedUBUNTU-CVE-2023-28879Not reported
Ubuntughostscriptdeb18.049.26~dfsg+0-0ubuntu0.18.04.18Not reportedUBUNTU-CVE-2023-28879Not reported
Ubuntughostscriptdeb20.049.50~dfsg-5ubuntu4.7Not reportedUBUNTU-CVE-2023-28879Not reported
Ubuntughostscriptdeb22.049.55.0~dfsg1-0ubuntu5.2Not reportedUBUNTU-CVE-2023-28879Not reported
Opensuseghostscriptrpmtumbleweed9.56.1-2.1Not reportedOPENSUSE-SU-2024:12853-1Not reported
Suseghostscriptrpmopenstack cloud 99.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmopenstack cloud crowbar 99.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmlinux enterprise server for sap applications 12 sp49.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmlinux enterprise software development kit 12 sp59.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmlinux enterprise server 12 sp2-bcl9.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmlinux enterprise server 12 sp4-espos9.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmlinux enterprise server 12 sp4-ltss9.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmlinux enterprise server 12 sp59.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmlinux enterprise server for sap applications 12 sp59.52-23.51.1Not reportedSUSE-SU-2023:1797-1Not reported
Suseghostscriptrpmlinux enterprise module for basesystem 15 sp49.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise high performance computing 15 sp1-ltss9.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise high performance computing 15 sp2-ltss9.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise high performance computing 15 sp3-espos9.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise high performance computing 15 sp3-ltss9.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise real time 15 sp39.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise server 15 sp1-ltss9.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise server 15 sp2-ltss9.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise server 15 sp3-ltss9.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise server for sap applications 15 sp19.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise server for sap applications 15 sp29.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmlinux enterprise server for sap applications 15 sp39.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmmanager proxy 4.29.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmmanager server 4.29.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmenterprise storage 79.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Suseghostscriptrpmenterprise storage 7.19.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported
Opensuseghostscriptrpmleap 15.49.52-150000.164.1Not reportedSUSE-SU-2023:1799-1Not reported

[Debian bug #1033757]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References