An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade ghostscript | May 6, 2025 | Nov 10, 2024 |
| Debian | — | Upgrade ghostscript | Jul 27, 2026 | Jul 27, 2026 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Jan 24, 2025 | Nov 10, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.04.0 | Nov 19, 2024 | Nov 10, 2024 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade libgsUpgrade ghostscript-docUpgrade ghostscript-tools-printingUpgrade libgs-develUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdf | May 1, 2025 | Nov 10, 2024 |
| Redhat_linux | — | Upgrade ghostscript-tools-printingUpgrade libgs-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade libgsNo solution exists | May 1, 2025 | Nov 10, 2024 |
| Rocky_linux | — | Upgrade ghostscript-tools-fontsUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade libgs-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-debugsourceUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade ghostscript | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-devel | Dec 5, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade libgs9Upgrade libgs10Upgrade ghostscript | Nov 13, 2024 | Nov 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub