CVE-2023-4042
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A flaw was found in ghostscript for Red Hat Enterprise Linux 8, where the fix for CVE-2020-16305 was not included as previously claimed. This issue affects the ghostscript package specifically.
Risk Assessment
Organizations using Red Hat Enterprise Linux 8 may be vulnerable to attacks exploiting this flaw in ghostscript, potentially leading to unauthorized access or data loss.
Recommendation
It is recommended to update the ghostscript package to the latest version to mitigate this vulnerability and to monitor systems for potential threats.
Original NVD description (English source)
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.