A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Oct 1, 2024 | Jul 28, 2020 |
| Debian | — | Upgrade ghostscript | Jul 30, 2024 | Jul 28, 2020 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Aug 31, 2020 | Jul 28, 2020 |
| Ghostscript | — | Upgrade to Ghostscript version 9.53 | Aug 7, 2020 | Jul 28, 2020 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/gsx to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/ghostscript to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Jul 28, 2020 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-miniUpgrade ghostscriptUpgrade ghostscript-mini-develUpgrade ghostscript-devel | Aug 1, 2020 | Jul 28, 2020 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Aug 5, 2020 | Jul 28, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub