CVE Catalog
CVE-2023-38559
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.45%
36th percentile - higher than 36% of all known CVEs
Summary
A buffer overflow flaw was found in the devn_pcx_write_rle() function in Ghostscript, which may allow a local attacker to cause a denial of service by outputting a crafted PDF file for a DEVN device.
Risk Assessment
This vulnerability may lead to service disruption, affecting the availability of services within the organization.
Recommendation
It is recommended to update Ghostscript to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.