CVE-2023-46751
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript...
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
- Record
CVE-2023-46751- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-03
CVE List No score
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
- Record
CVE-2023-46751- Updated
- 2026-11-03
EUVDEUVD-2023-50918 No score
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
- Record
EUVD-2023-50918- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-798r-fxxx-hvxj
7.5
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript...
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
- Record
GHSA-798r-fxxx-hvxj- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-03
OSVBELL-CVE-2023-46751
7.5
- Record
BELL-CVE-2023-46751- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
7.5
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
- Record
CVE-2023-46751- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 18 moreShow less
OSVDEBIAN-CVE-2023-46751
7.5
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
- Record
DEBIAN-CVE-2023-46751- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVOESA-2023-1984
7.5
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.(CVE-2023-46751)
- Record
OESA-2023-1984- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2024-1016
7.5
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.(CVE-2023-46751)
- Record
OESA-2024-1016- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2024-1055
7.5
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.(CVE-2023-46751)
- Record
OESA-2024-1055- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:4362
7.8
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2025:4362- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:7422
7.8
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2025:7422- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:4362
7.8
Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
-
ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)
-
ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
-
ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
-
ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
-
ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
-
ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
-
ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:4362- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-46751
7.5
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
- Record
UBUNTU-CVE-2023-46751- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2025:4362 No score
Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
- ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)
- ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
- ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
- ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
- ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
- ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
- ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:4362- Updated
- 2026-11-02
OSVALSA-2025:7422 No score
Moderate: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
- ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
- ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
- ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
- ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
- ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
- ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:7422- Updated
- 2026-11-02
OSVCLSA-2026-1792077881 No score
ghostscript: Fix of 6 CVEs
- CVE-2023-28879: fix buffer overrun in (T)BCP encoding
- CVE-2023-38559: fix out-of-bounds read in devn_pcx_write_rle
- CVE-2023-46751: fix dangling file pointer in gdev_prn_open_printer_seekable
- CVE-2024-46951: check the type of the Pattern Implementation
- CVE-2024-46953: check for overflow validating output file name format string
- CVE-2024-46956: fix buffer length check in file enumeration
- Record
CLSA-2026-1792077881- Updated
- 2026-11-02
OSVCLSA-2026-1792078022 No score
ghostscript: Fix of 6 CVEs
- CVE-2023-28879: fix buffer overrun in (T)BCP encoding
- CVE-2023-38559: fix out-of-bounds read in devn_pcx_write_rle
- CVE-2023-46751: fix dangling file pointer in gdev_prn_open_printer_seekable
- CVE-2024-46951: check the type of the Pattern Implementation
- CVE-2024-46953: check for overflow validating output file name format string
- CVE-2024-46956: fix buffer length check in file enumeration
- Record
CLSA-2026-1792078022- Updated
- 2026-11-02
OSVCLSA-2026-1792238279 No score
ghostscript: Fix of 6 CVEs
- CVE-2023-28879: fix buffer overrun in (T)BCP encoding
- CVE-2023-38559: fix out-of-bounds read in devn_pcx_write_rle
- CVE-2023-46751: fix dangling file pointer in gdev_prn_open_printer_seekable
- CVE-2024-46951: check the type of the Pattern Implementation
- CVE-2024-46953: check for overflow validating output file name format string
- CVE-2024-46956: fix buffer length check in file enumeration
- Record
CLSA-2026-1792238279- Updated
- 2026-11-02
OSVMGASA-2023-0351 No score
Updated ghostscript packages fix a security vulnerability
The updated packages fix a security vulnerability. An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer. (CVE-2023-46751)
- Record
MGASA-2023-0351- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13548-1 No score
ghostscript-9.56.1-8.1 on GA media
These are all security issues fixed in the ghostscript-9.56.1-8.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13548-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4917-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2023-46751: Fixed dangling pointer in gdev_prn_open_printer_seekable() (bsc#1217871).
- Record
SUSE-SU-2023:4917-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4920-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2023-46751: Fixed dangling pointer in gdev_prn_open_printer_seekable() (bsc#1217871).
- Record
SUSE-SU-2023:4920-1- Updated
- 2026-11-02
OSVUSN-6551-1 No score
ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled writing TIFF files. A remote attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service.
- Record
USN-6551-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlmaLinux:8 From an advisory covering 7 CVEs |
before 9.27-16.el8_10 | 9.27-16.el8_10 |
ghostscript-docAlmaLinux:8 From an advisory covering 7 CVEs |
before 9.27-16.el8_10 | 9.27-16.el8_10 |
ghostscript-tools-dvipdfAlmaLinux:8 From an advisory covering 7 CVEs |
before 9.27-16.el8_10 | 9.27-16.el8_10 |
ghostscript-tools-fontsAlmaLinux:8 From an advisory covering 7 CVEs |
before 9.27-16.el8_10 | 9.27-16.el8_10 |
ghostscript-tools-printingAlmaLinux:8 From an advisory covering 7 CVEs |
before 9.27-16.el8_10 | 9.27-16.el8_10 |
ghostscript-x11AlmaLinux:8 From an advisory covering 7 CVEs |
before 9.27-16.el8_10 | 9.27-16.el8_10 |
libgsAlmaLinux:8 From an advisory covering 7 CVEs |
before 9.27-16.el8_10 | 9.27-16.el8_10 |
libgs-develAlmaLinux:8 From an advisory covering 7 CVEs |
before 9.27-16.el8_10 | 9.27-16.el8_10 |
ghostscriptAlmaLinux:9 From an advisory covering 6 CVEs |
before 9.54.0-18.el9_6 | 9.54.0-18.el9_6 |
ghostscript-docAlmaLinux:9 From an advisory covering 6 CVEs |
before 9.54.0-18.el9_6 | 9.54.0-18.el9_6 |
Show 98 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscript-tools-dvipdfAlmaLinux:9 From an advisory covering 6 CVEs |
before 9.54.0-18.el9_6 | 9.54.0-18.el9_6 |
ghostscript-tools-fontsAlmaLinux:9 From an advisory covering 6 CVEs |
before 9.54.0-18.el9_6 | 9.54.0-18.el9_6 |
ghostscript-tools-printingAlmaLinux:9 From an advisory covering 6 CVEs |
before 9.54.0-18.el9_6 | 9.54.0-18.el9_6 |
ghostscript-x11AlmaLinux:9 From an advisory covering 6 CVEs |
before 9.54.0-18.el9_6 | 9.54.0-18.el9_6 |
libgsAlmaLinux:9 From an advisory covering 6 CVEs |
before 9.54.0-18.el9_6 | 9.54.0-18.el9_6 |
libgs-develAlmaLinux:9 From an advisory covering 6 CVEs |
before 9.54.0-18.el9_6 | 9.54.0-18.el9_6 |
ghostscriptAlpaquita:23 |
10.0.0-r0 up to 10.01.2-r1 | 10.01.2-r1 |
ghostscriptAlpaquita:stream |
10.0.0-r0 up to 10.02.1-r0 | 10.02.1-r0 |
ghostscriptTuxCare:RHEL:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-cupsTuxCare:RHEL:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-docTuxCare:RHEL:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-gtkTuxCare:RHEL:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
libgsTuxCare:RHEL:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
libgs-develTuxCare:RHEL:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscriptTuxCare:OracleLinux:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-cupsTuxCare:OracleLinux:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-docTuxCare:OracleLinux:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-gtkTuxCare:OracleLinux:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
libgsTuxCare:OracleLinux:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
libgs-develTuxCare:OracleLinux:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscriptTuxCare:CentOS:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-cupsTuxCare:CentOS:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-docTuxCare:CentOS:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscript-gtkTuxCare:CentOS:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
libgsTuxCare:CentOS:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
libgs-develTuxCare:CentOS:7 From an advisory covering 6 CVEs |
before 9.25-5.0.1.el7.tuxcare.els2 | 9.25-5.0.1.el7.tuxcare.els2 |
ghostscriptDebian:12 |
before 10.0.0~dfsg-11+deb12u3, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u2 |
10.0.0~dfsg-11+deb12u3 |
ghostscriptDebian:13 |
before 10.02.1~dfsg-1 | 10.02.1~dfsg-1 |
ghostscriptDebian:14 |
before 10.02.1~dfsg-1 | 10.02.1~dfsg-1 |
ghostscriptMageia:9 |
before 10.00.0-6.4.mga9 | 10.00.0-6.4.mga9 |
ghostscriptopenEuler:20.03-LTS-SP1 |
before 9.52-10.oe1 | 9.52-10.oe1 |
ghostscriptopenEuler:20.03-LTS-SP3 |
before 9.52-12.oe1 | 9.52-12.oe1 |
ghostscriptopenEuler:20.03-LTS-SP4 |
before 9.52-12.oe2003sp4 | 9.52-12.oe2003sp4 |
ghostscriptopenEuler:22.03-LTS |
before 9.55.0-7.oe2203sp2 | 9.55.0-7.oe2203sp2 |
ghostscriptopenEuler:22.03-LTS-SP2 |
before 9.55.0-7.oe2203sp2 | 9.55.0-7.oe2203sp2 |
ghostscriptopenEuler:22.03-LTS-SP1 |
before 9.55.0-6.oe2203sp1 | 9.55.0-6.oe2203sp1 |
ghostscriptopenEuler:22.03-LTS-SP3 |
before 9.55.0-7.oe2203sp3 | 9.55.0-7.oe2203sp3 |
ghostscriptRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-x11Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
libgsRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
libgs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-docRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-tools-dvipdfRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-tools-fontsRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-tools-printingRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
libgs-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
libgs-develRed Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscriptRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-docRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-tools-dvipdfRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-tools-fontsRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-tools-printingRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-x11Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
libgsRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
libgs-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscriptRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-debugsourceRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-tools-fontsRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-tools-printingRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
libgs-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
libgs-develRed Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs |
before 0:9.54.0-18.el9_6 | 0:9.54.0-18.el9_6 |
ghostscriptRocky Linux:8 From an advisory covering 7 CVEs |
before 0:9.27-16.el8_10 | 0:9.27-16.el8_10 |
ghostscriptSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 9.52-23.63.1 | 9.52-23.63.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP5 |
before 9.52-23.63.1 | 9.52-23.63.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 9.52-23.63.1 | 9.52-23.63.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptSUSE:Enterprise Storage 7.1 |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptopenSUSE:Leap 15.4 |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptopenSUSE:Leap 15.5 |
before 9.52-150000.177.1 | 9.52-150000.177.1 |
ghostscriptUbuntu:22.04:LTS |
before 9.55.0~dfsg1-0ubuntu5.6, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.29.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.5 |
9.55.0~dfsg1-0ubuntu5.6 |
ghostscriptUbuntu:24.04:LTS |
before 10.02.1~dfsg1-0ubuntu1, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.1 |
10.02.1~dfsg1-0ubuntu1 |
ghostscriptopenSUSE:Tumbleweed |
before 9.56.1-8.1 | 9.56.1-8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | NVD, OSV | |
| aliases | EUVD | |
| references | CVE List, GitHub Advisories | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-46751 is a high vulnerability (CVSS 7.5) in Artifex Ghostscript, published December 6, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. Fixed in ghostscript 10.01.2-r1.
References
ghostscript.com
git.ghostscript.com?p=ghostpdl.git%3Ba=commit%3Bh=dcdbc595c13c9d11d235702dff46bb74c80f7698
bugs.ghostscript.com/show_bug.cgi?id=707264
debian.org/security/2023/dsa-5578
nvd.nist.gov/vuln/detail/CVE-2023-46751
github.com/advisories/GHSA-798r-fxxx-hvxj
Show 73 moreShow less
access.redhat.com/errata/RHSA-2025:4362
access.redhat.com/security/cve/CVE-2020-27792
access.redhat.com/security/cve/CVE-2023-46751
access.redhat.com/security/cve/CVE-2024-46951
access.redhat.com/security/cve/CVE-2024-46952
access.redhat.com/security/cve/CVE-2024-46953
access.redhat.com/security/cve/CVE-2024-46954
access.redhat.com/security/cve/CVE-2024-46956
bugzilla.redhat.com/2247179
bugzilla.redhat.com/2253365
bugzilla.redhat.com/2325041
bugzilla.redhat.com/2325043
bugzilla.redhat.com/2325044
bugzilla.redhat.com/2325045
bugzilla.redhat.com/2325047
errata.almalinux.org/8/ALSA-2025-4362.html
access.redhat.com/errata/RHSA-2025:7422
errata.almalinux.org/9/ALSA-2025-7422.html
docs.bell-sw.com/security/cves/CVE-2023-46751
errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792077881.html
nvd.nist.gov/vuln/detail/CVE-2023-28879
nvd.nist.gov/vuln/detail/CVE-2023-38559
nvd.nist.gov/vuln/detail/CVE-2024-46951
nvd.nist.gov/vuln/detail/CVE-2024-46953
nvd.nist.gov/vuln/detail/CVE-2024-46956
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792078022.html
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1792238279.html
security-tracker.debian.org/tracker/CVE-2023-46751
advisories.mageia.org/MGASA-2023-0351.html
bugs.mageia.org/show_bug.cgi?id=32619
ubuntu.com/security/notices/USN-6551-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1984
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1016
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1055
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2247179
bugzilla.redhat.com/show_bug.cgi?id=2253365
bugzilla.redhat.com/show_bug.cgi?id=2325041
bugzilla.redhat.com/show_bug.cgi?id=2325043
bugzilla.redhat.com/show_bug.cgi?id=2325044
bugzilla.redhat.com/show_bug.cgi?id=2325045
bugzilla.redhat.com/show_bug.cgi?id=2325047
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4362.json
cve.org/CVERecord?id=CVE-2020-27792
nvd.nist.gov/vuln/detail/CVE-2020-27792
git.ghostscript.com?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe9822afb36e8a0eafc2b7
cve.org/CVERecord?id=CVE-2023-46751
cve.org/CVERecord?id=CVE-2024-46951
bugs.ghostscript.com/show_bug.cgi?id=707991
cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit?id=f49812186baa7d1362880673408a6fbe8719b4f8
github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html
suse.com/support/update/announcement/2024/suse-su-20243942-1
cve.org/CVERecord?id=CVE-2024-46952
nvd.nist.gov/vuln/detail/CVE-2024-46952
bugs.ghostscript.com/show_bug.cgi?id=708001
cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f
cve.org/CVERecord?id=CVE-2024-46953
bugs.ghostscript.com/show_bug.cgi?id=707793
cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit?id=1f21a45df0fa3abec4cff12951022b192dda3c00
cve.org/CVERecord?id=CVE-2024-46954
nvd.nist.gov/vuln/detail/CVE-2024-46954
bugs.ghostscript.com/show_bug.cgi?id=707788
cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit?id=55f587dd039282316f512e1bea64218fd991f934
cve.org/CVERecord?id=CVE-2024-46956
bugs.ghostscript.com/show_bug.cgi?id=707895
cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit?id=f4151f12db32cd3ed26c24327de714bf2c3ed6ca
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7422.json
errata.rockylinux.org/RLSA-2025:4362
suse.com/support/update/announcement/2023/suse-su-20234917-1
bugzilla.suse.com/1217871
suse.com/security/cve/CVE-2023-46751
suse.com/support/update/announcement/2023/suse-su-20234920-1
ubuntu.com/security/CVE-2023-46751