CVE-2023-28879
CriticalAdvisory
Published 31 Mar 2023In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.063
- 93rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 26
- of 17,781 indexed, latest versions
- Container images
- 28
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
ghostscript - security update
Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 28 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| ghostscriptdeb | 9.18~dfsg~0-0ubuntu2.7, 9.26~dfsg+0-0ubuntu0.18.04.14, 9.27~dfsg-2+deb10u1, 9.27~dfsg-2+deb10u3+5 more | 9.26~dfsg+0-0ubuntu0.16.04.14+esm5, 9.26~dfsg+0-0ubuntu0.18.04.18, 9.27~dfsg-2+deb10u7, 9.50~dfsg-5ubuntu4.7+1 more | 20 |
| ghostscriptapk | 9.54.0-r0, 9.55.0-r0, 9.56.1-r0 | 9.54.0-r2, 9.55.0-r1, 9.56.1-r1 | 8 |
- OSV records
- ALPINE-CVE-2023-28879UBUNTU-CVE-2023-28879DLA-3381-1DSA-5383-1
- Also known as
- USN-6017-1
Charts affected
26 by stars
Container images carrying it
28 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| conduction/ | ee2121b569ac | ghostscript | 9.27~dfsg-2+deb10u7 | 3 |
| anonaddy/ | 957a95565166 | ghostscript | 9.56.1-r1 | 1 |
| asonix/ | 480d36cd97e5 | ghostscript | 9.56.1-r1 | 1 |
| ceticasbl/ | 6c0aa7567145 | ghostscript | 9.27~dfsg-2+deb10u7 | 1 |
| eclipseaerios/ | 2f93bfa4cf0d | ghostscript | 9.55.0-r1 | 1 |
| guacamole/ | 2288530a4d1c | ghostscript | 9.27~dfsg-2+deb10u7 | 1 |
| guacamole/ | 49d43948140f | ghostscript | 9.27~dfsg-2+deb10u7 | 1 |
| library/ | 277c6c25980f | ghostscript | 9.53.3~dfsg-7+deb11u4 | 1 |
| librenms/ | 4f1f3d667cc7 | ghostscript | 9.55.0-r1 | 1 |
| linuxserver/ | 938810eca3d3 | ghostscript | 9.50~dfsg-5ubuntu4.7 | 1 |
| linuxserver/ | f93d2560e233 | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.18 | 1 |
| octoprint/ | 106c26efcd8a | ghostscript | 9.27~dfsg-2+deb10u7 | 1 |
| octoprint/ | ea3bffae2470 | ghostscript | 9.27~dfsg-2+deb10u7 | 1 |
| openemr/ | 89eaa6d9a4e3 | ghostscript | 9.55.0-r1 | 1 |
| openkm/ | 3bc465a7461b | ghostscript | 9.50~dfsg-5ubuntu4.7 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.14+esm5 | 1 |
| ghcr.io/ | 3113c0960507 | ghostscript | 9.53.3~dfsg-7+deb11u4 | 1 |
| ghcr.io/ | e28e0e7de11b | ghostscript | 9.50~dfsg-5ubuntu4.7 | 1 |
| ghcr.io/ | 01563adc95fd | ghostscript | 9.50~dfsg-5ubuntu4.7 | 1 |
| ghcr.io/ | 2b92df1143b9 | ghostscript | 9.50~dfsg-5ubuntu4.7 | 1 |
| ghcr.io/ | 600221f0f43f | ghostscript | 9.50~dfsg-5ubuntu4.7 | 1 |
| ghcr.io/ | a85e03d8bc1d | ghostscript | 9.50~dfsg-5ubuntu4.7 | 1 |
| ghcr.io/ | 4f08e2823756 | ghostscript | 9.56.1-r1 | 1 |
| ghcr.io/ | 9bbc9a90641e | ghostscript | 9.53.3~dfsg-7+deb11u4 | 1 |
| ghcr.io/ | c3012c8a34b4 | ghostscript | 9.53.3~dfsg-7+deb11u4 | 1 |
| quay.io/ | fae21f06131f | ghostscript | 9.27~dfsg-2+deb10u7 | 1 |
| quay.io/ | 3207f957e80c | ghostscript | 9.54.0-r2 | 1 |
| quay.io/ | 4b188259267e | ghostscript | 9.54.0-r2 | 1 |