CVE-2023-38560: 
Ghostscript vulnerability analysis and mitigation

CVE-2023-38560 is an integer overflow vulnerability discovered in Ghostscript's PCL implementation, specifically in the plglyphname function located at pcl/pl/plfont.c:418. The vulnerability was reported in July 2023 and affects the Ghostscript software package (NVD, Red Hat).

The vulnerability is classified as an Integer Overflow or Wraparound (CWE-190) with a CVSS v3.1 base score of 5.5 (Medium). The vulnerability exists in the PCL to PDF transformation functionality. The technical assessment indicates that the flaw occurs during the processing of PCL files when converting them to PDF format (NVD).

The vulnerability can allow a local attacker to cause a denial of service condition when transforming a specially crafted PCL file to PDF format. The impact is limited to availability (High), with no direct impact on confidentiality or integrity of the system (NVD, Ubuntu).

A fix has been implemented in the Ghostscript codebase, available through a patch that addresses the integer overflow condition. Some distributions, like Ubuntu, are not affected by default as PCL is not built due to the usage of the build option --without-pcl (Ubuntu).