A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
Weakness
The product divides a value by zero.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ghostscript | Artifex | 9.50 (including) | 9.50 (including) |
| Red Hat Enterprise Linux 8 | RedHat | ghostscript-0:9.27-12.el8 | * |
| Ghostscript | Ubuntu | bionic | * |
| Ghostscript | Ubuntu | esm-infra/bionic | * |
| Ghostscript | Ubuntu | esm-infra/focal | * |
| Ghostscript | Ubuntu | esm-infra/xenial | * |
| Ghostscript | Ubuntu | focal | * |
| Ghostscript | Ubuntu | trusty | * |
| Ghostscript | Ubuntu | upstream | * |
| Ghostscript | Ubuntu | xenial | * |
References
- https://bugs.ghostscript.com/show_bug.cgi?id=701843
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=4e713293de84b689c4ab358f3e110ea54aa81925
- https://lists.debian.org/debian-lts-announce/2023/09/msg00029.html
- https://bugs.ghostscript.com/show_bug.cgi?id=701843
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=4e713293de84b689c4ab358f3e110ea54aa81925
- https://lists.debian.org/debian-lts-announce/2023/09/msg00029.html