Heap-buffer-overflow in Calc_Length in ghostscript
Summary
OSV-2023-1079: Heap-buffer-overflow in Calc_Length. Affects ghostscript versions >= 441c9e3a4ca08fa7f7c00063af33196b0d88ebaf, < 74bfcfea5faa35ee3c5e7e2690b2473e0c4aac59. Fixed in 74bfcfea5faa35ee3c5e7e2690b2473e0c4aac59. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is widely used for rendering and converting documents. The Calc_Length function in Ghostscript is responsible for calculating the length of a string. However, a vulnerability has been discovered in this function that can lead to a heap-buffer-overflow read. This vulnerability can be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition.
Vulnerability Detail
The vulnerability originates from a heap-buffer-overflow read in the Calc_Length function. When processing a specially crafted string, the function fails to properly validate the length, leading to the overflow. This can result in the disclosure of sensitive information or the execution of arbitrary code. The vulnerability was reported through the OSS-Fuzz project and has a medium severity rating.
How To Fix
Minimum fixed version
74bfcfea5faa35ee3c5e7e2690b2473e0c4aac59
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the affected functionality in Ghostscript or restrict access to the vulnerable component. However, it is strongly advised to apply the official patch or update to a fixed version as soon as possible.
Conclusion
In conclusion, a heap-buffer-overflow vulnerability has been identified in the Calc_Length function of the ghostscript package. This vulnerability can be exploited to execute arbitrary code or cause a denial-of-service condition. It is crucial to update to a patched version or apply the official fix as soon as possible. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is commonly used for rendering and converting documents.
This vulnerability can allow an attacker to execute arbitrary code or cause a denial-of-service condition.
This vulnerability was discovered through the OSS-Fuzz project, which performs continuous fuzz testing on open-source software.
This vulnerability has a medium severity rating.
To fix this vulnerability, update the ghostscript package to a version that includes the patch for this issue.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
