Every CVE Search/ Get API key

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution...

8.8 HighPublic exploitFix available

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

6.37%Up 6.3 points since Sep 18, 2023
90%50%10%1%

What each source reports

NVD Score used 8.8

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Record
CVE-2023-43115
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
CVE List No score

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Record
CVE-2023-43115
Updated
2026-11-02
EUVDEUVD-2023-47536 No score

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Record
EUVD-2023-47536
Updated
2026-11-03
GitHub AdvisoriesGHSA-9p55-888j-qxrh 9.8

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution...

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Record
GHSA-9p55-888j-qxrh
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALPINE-CVE-2023-43115 8.8

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Record
ALPINE-CVE-2023-43115
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2023-43115 8.8
Record
BELL-CVE-2023-43115
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 16 moreShow less
OSV 8.8

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Record
CVE-2023-43115
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-43115 8.8

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Record
DEBIAN-CVE-2023-43115
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1695 9.8

ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.

Security Fix(es):

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).(CVE-2023-43115)

Record
OESA-2023-1695
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1696 9.8

ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.

Security Fix(es):

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).(CVE-2023-43115)

Record
OESA-2023-1696
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5868 8.8

Red Hat Security Advisory: ghostscript security update

Record
RHSA-2023:5868
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:6265 8.8

Red Hat Security Advisory: ghostscript security update

Record
RHSA-2023:6265
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:6732 8.8

Red Hat Security Advisory: ghostscript security update

Record
RHSA-2023:6732
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-43115 8.8

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

Record
UBUNTU-CVE-2023-43115
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:6265 No score

Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:6265
Updated
2026-11-02
OSVALSA-2023:6732 No score

Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents (CVE-2023-43115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:6732
Updated
2026-11-02
OSVMGASA-2023-0290 No score

Updated ghostscript packages fix security vulnerability

The updated packages fix a security vulnerability:

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. (CVE-2023-43115)

Record
MGASA-2023-0290
Updated
2026-11-02
OSVopenSUSE-SU-2024:13247-1 No score

ghostscript-9.56.1-6.1 on GA media

These are all security issues fixed in the ghostscript-9.56.1-6.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13247-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10855-1 No score

python311-ocrmypdf-17.4.2-1.1 on GA media

These are all security issues fixed in the python311-ocrmypdf-17.4.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10855-1
Updated
2026-11-02
OSVSUSE-SU-2023:3938-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c (b sc#1215466).
Record
SUSE-SU-2023:3938-1
Updated
2026-11-02
OSVSUSE-SU-2023:3984-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c (bsc#1215466).
Record
SUSE-SU-2023:3984-1
Updated
2026-11-02
OSVUSN-6433-1 No score

ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PDF documents. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code.

Record
USN-6433-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ghostscript
Alpine:v3.18
 before 10.02.0-r0
10.02.0-r0
ghostscript
Alpine:v3.19
 before 10.02.0-r0
10.02.0-r0
ghostscript
Alpine:v3.20
 before 10.02.0-r0
10.02.0-r0
ghostscript
Alpine:v3.21
 before 10.02.0-r0
10.02.0-r0
ghostscript
Alpine:v3.22
 before 10.02.0-r0
10.02.0-r0
ghostscript
Alpine:v3.23
 before 10.02.0-r0
10.02.0-r0
ghostscript
Alpine:v3.24
 before 10.02.0-r0
10.02.0-r0
ghostscript
AlmaLinux:9
 before 9.54.0-11.el9_2
9.54.0-11.el9_2
ghostscript-doc
AlmaLinux:9
 before 9.54.0-11.el9_2
9.54.0-11.el9_2
ghostscript-tools-dvipdf
AlmaLinux:9
 before 9.54.0-11.el9_2
9.54.0-11.el9_2
Show 111 moreShow less
Affected packages
PackageAffectedFixed
ghostscript-tools-fonts
AlmaLinux:9
 before 9.54.0-11.el9_2
9.54.0-11.el9_2
ghostscript-tools-printing
AlmaLinux:9
 before 9.54.0-11.el9_2
9.54.0-11.el9_2
ghostscript-x11
AlmaLinux:9
 before 9.54.0-11.el9_2
9.54.0-11.el9_2
libgs
AlmaLinux:9
 before 9.54.0-11.el9_2
9.54.0-11.el9_2
libgs-devel
AlmaLinux:9
 before 9.54.0-11.el9_2
9.54.0-11.el9_2
ghostscript
AlmaLinux:9
 before 9.54.0-14.el9_3
9.54.0-14.el9_3
ghostscript-doc
AlmaLinux:9
 before 9.54.0-14.el9_3
9.54.0-14.el9_3
ghostscript-tools-dvipdf
AlmaLinux:9
 before 9.54.0-14.el9_3
9.54.0-14.el9_3
ghostscript-tools-fonts
AlmaLinux:9
 before 9.54.0-14.el9_3
9.54.0-14.el9_3
ghostscript-tools-printing
AlmaLinux:9
 before 9.54.0-14.el9_3
9.54.0-14.el9_3
ghostscript-x11
AlmaLinux:9
 before 9.54.0-14.el9_3
9.54.0-14.el9_3
libgs
AlmaLinux:9
 before 9.54.0-14.el9_3
9.54.0-14.el9_3
libgs-devel
AlmaLinux:9
 before 9.54.0-14.el9_3
9.54.0-14.el9_3
ghostscript
Alpaquita:23
 10.0.0-r0 up to 10.01.2-r1
10.01.2-r1
ghostscript
Alpaquita:stream
 10.0.0-r0 up to 10.02.0-r1
10.02.0-r1
ghostscript
Debian:12
 before 10.0.0~dfsg-11+deb12u2, plus listed versions
10.0.0~dfsg-1110.0.0~dfsg-11+deb12u1
10.0.0~dfsg-11+deb12u2
ghostscript
Debian:13
 before 10.02.0~dfsg-1
10.02.0~dfsg-1
ghostscript
Debian:14
 before 10.02.0~dfsg-1
10.02.0~dfsg-1
ghostscript
Mageia:8
 before 9.53.3-2.7.mga8
9.53.3-2.7.mga8
ghostscript
Mageia:9
 before 10.00.0-6.3.mga9
10.00.0-6.3.mga9
ghostscript
openEuler:20.03-LTS-SP3
 before 9.52-11.oe1
9.52-11.oe1
ghostscript
openEuler:22.03-LTS-SP2
 before 9.55.0-6.oe2203sp2
9.55.0-6.oe2203sp2
ghostscript
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-debugsource
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-doc
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-gtk-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-tools-dvipdf
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-tools-fonts
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-tools-printing
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-x11
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-x11-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
libgs
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
libgs-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-debuginfo
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-debugsource
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-gtk-debuginfo
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-tools-fonts
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-tools-printing
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript-x11-debuginfo
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
libgs-debuginfo
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
libgs-devel
Red Hat:rhel_eus:9.0::crb
 before 0:9.54.0-7.el9_0.2
0:9.54.0-7.el9_0.2
ghostscript
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-doc
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-gtk-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-tools-dvipdf
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-tools-fonts
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-tools-printing
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-x11
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-x11-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
libgs
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
libgs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-gtk-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-tools-fonts
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-tools-printing
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript-x11-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
libgs-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
libgs-devel
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-11.el9_2
0:9.54.0-11.el9_2
ghostscript
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-doc
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-gtk-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-tools-dvipdf
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-tools-fonts
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-tools-printing
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-x11
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-x11-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
libgs
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
libgs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-gtk-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-tools-fonts
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-tools-printing
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript-x11-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
libgs-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
libgs-devel
Red Hat:enterprise_linux:9::crb
 before 0:9.54.0-14.el9_3
0:9.54.0-14.el9_3
ghostscript
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 9.52-23.60.1
9.52-23.60.1
ghostscript
SUSE:Linux Enterprise Server 12 SP5
 before 9.52-23.60.1
9.52-23.60.1
ghostscript
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 9.52-23.60.1
9.52-23.60.1
ghostscript
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Manager Proxy 4.2
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Manager Server 4.2
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
SUSE:Enterprise Storage 7.1
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
openSUSE:Leap 15.4
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
openSUSE:Leap 15.5
 before 9.52-150000.173.2
9.52-150000.173.2
ghostscript
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2
Show 33 moreShow less
9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm89.26~dfsg+0-0ubuntu0.16.04.14+esm99.26~dfsg+0-0ubuntu0.16.04.14+esm109.26~dfsg+0-0ubuntu0.16.04.14+esm11
 None known
ghostscript
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1
Show 24 moreShow less
9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm39.26~dfsg+0-0ubuntu0.18.04.18+esm49.26~dfsg+0-0ubuntu0.18.04.18+esm59.26~dfsg+0-0ubuntu0.18.04.18+esm6
 None known
ghostscript
Ubuntu:20.04:LTS
 before 9.50~dfsg-5ubuntu4.11, plus listed versions
9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3
Show 11 moreShow less
9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.10
9.50~dfsg-5ubuntu4.11
ghostscript
Ubuntu:22.04:LTS
 before 9.55.0~dfsg1-0ubuntu5.5, plus listed versions
9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.29.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.4
9.55.0~dfsg1-0ubuntu5.5
ghostscript
openSUSE:Tumbleweed
 before 9.56.1-6.1
9.56.1-6.1
python-ocrmypdf
openSUSE:Tumbleweed
 before 17.4.2-1.1
17.4.2-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubjostaub/ghostscript-CVE-2023-431152023-09-28

History

History
RecordedChangedSources
affectedOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-43115 is a high vulnerability (CVSS 8.8) in Artifex Ghostscript, published September 18, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.37%, the 93rd percentile. Fixed in ghostscript 10.02.0-r0.

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open