Global-buffer-overflow in get_unpack_proc in ghostscript
Summary
OSV-2022-805: Global-buffer-overflow in get_unpack_proc. Affects ghostscript across 2 version ranges.
>= eb9fc0106d45d1ce81ab2c4ae1a3d6e90a8c0164, < 9f8b92bf33fb0bdd20ac2ce2e1164dbce30ac5fb
>= ee290c1aebaa172c812f21024af2dbf721fa5865, < 593cc12df5834bf0734b4196d7447e02414f5ba3
Fixed in 593cc12df5834bf0734b4196d7447e02414f5ba3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is widely used for rendering and converting documents. The get_unpack_proc function in Ghostscript is responsible for unpacking image data. However, a global-buffer-overflow vulnerability has been discovered in this function, which can lead to a crash or potentially allow an attacker to execute arbitrary code.
Vulnerability Detail
The vulnerability occurs due to a global-buffer-overflow in the get_unpack_proc function. An attacker can exploit this vulnerability by providing a specially crafted image file, which triggers the overflow when the image is processed. This can result in a crash or potentially allow the attacker to execute arbitrary code with the privileges of the Ghostscript process. The vulnerability has been assigned the identifier OSV-2022-805.
How To Fix
Minimum fixed version
593cc12df5834bf0734b4196d7447e02414f5ba3
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, users can avoid processing untrusted image files with Ghostscript. This can be achieved by implementing input validation and filtering mechanisms to ensure that only trusted image files are processed by Ghostscript.
Conclusion
In conclusion, a global-buffer-overflow vulnerability has been discovered in the get_unpack_proc function of Ghostscript. This vulnerability can lead to a crash or potential code execution. Users are advised to update their installations to a version that includes the fix or implement the suggested workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is commonly used for rendering and converting documents.
The vulnerability can lead to a crash or potentially allow an attacker to execute arbitrary code with the privileges of the Ghostscript process.
To fix this vulnerability, update Ghostscript to a version that includes the fix. The fix was implemented in commit 593cc12df5834bf0734b4196d7447e02414f5ba3 or a later one.
Yes, users can avoid processing untrusted image files with Ghostscript as a workaround. Implement input validation and filtering mechanisms to ensure only trusted image files are processed.
For more information about this vulnerability, you can refer to the OSS-Fuzz report at https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50731.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
