In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libgs-develUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-docUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript | Nov 6, 2023 | Sep 18, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 26, 2024 | Sep 18, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-gtkUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-fontsUpgrade libgs-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-docUpgrade ghostscript-tools-dvipdfUpgrade libgs-devel | Feb 17, 2025 | Sep 18, 2023 |
| Centos_linux | — | Upgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-docUpgrade ghostscript-debugsourceUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-gtk-debuginfo | Nov 3, 2023 | Sep 18, 2023 |
| Debian | — | Upgrade ghostscript | Jul 30, 2024 | Sep 18, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.02.0 | Jan 24, 2024 | Sep 18, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Sep 18, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Sep 18, 2023 |
| Oracle_linux | — | Upgrade libgsUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printing | Nov 3, 2023 | Sep 18, 2023 |
| Redhat_linux | — | Upgrade ghostscript-debugsourceUpgrade ghostscriptNo solution existsUpgrade ghostscript-tools-printingUpgrade ghostscript-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade libgsUpgrade ghostscript-gtk-debuginfoUpgrade libgs-debuginfo | Nov 1, 2023 | Sep 18, 2023 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-devel | Oct 4, 2023 | Sep 18, 2023 |
| Ubuntu | — | Upgrade ghostscript | Oct 18, 2023 | Sep 18, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub