CVE-2023-4042

A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.
Configurations

Configuration 1 (hide)

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0_aarch64:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*

History

21 Nov 2024, 08:34

Type Values Removed Values Added
References () https://access.redhat.com/errata/RHSA-2023:7053 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2023:7053 - Third Party Advisory
References () https://access.redhat.com/security/cve/CVE-2023-4042 - Third Party Advisory () https://access.redhat.com/security/cve/CVE-2023-4042 - Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=1870257 - Issue Tracking, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=1870257 - Issue Tracking, Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2228151 - Issue Tracking, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=2228151 - Issue Tracking, Third Party Advisory

27 Dec 2023, 22:04

Type Values Removed Values Added
First Time Redhat enterprise Linux For Ibm Z Systems
Redhat codeready Linux Builder For Ibm Z Systems
Redhat codeready Linux Builder
Redhat codeready Linux Builder For Power Little Endian
Redhat enterprise Linux For Arm 64
Redhat enterprise Linux For Power Little Endian
Redhat codeready Linux Builder For Arm64
CPE cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0_aarch64:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
References () https://access.redhat.com/errata/RHSA-2023:7053 - () https://access.redhat.com/errata/RHSA-2023:7053 - Third Party Advisory

14 Nov 2023, 21:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2023:7053 -

29 Aug 2023, 15:40

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1870257 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1870257 - Issue Tracking, Third Party Advisory
References (MISC) https://access.redhat.com/security/cve/CVE-2023-4042 - (MISC) https://access.redhat.com/security/cve/CVE-2023-4042 - Third Party Advisory
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2228151 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2228151 - Issue Tracking, Third Party Advisory
CPE cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
CWE CWE-787
First Time Redhat enterprise Linux
Redhat
Artifex
Artifex ghostscript

23 Aug 2023, 13:17

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-23 13:15

Updated : 2024-11-21 08:34


NVD link : CVE-2023-4042

Mitre link : CVE-2023-4042

CVE.ORG link : CVE-2023-4042


JSON object : View

Products Affected

redhat

  • enterprise_linux_for_ibm_z_systems
  • enterprise_linux_for_power_little_endian
  • enterprise_linux_for_arm_64
  • codeready_linux_builder_for_ibm_z_systems
  • codeready_linux_builder_for_power_little_endian
  • codeready_linux_builder_for_arm64
  • enterprise_linux
  • codeready_linux_builder

artifex

  • ghostscript
CWE
CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write