Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-tools-printingUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-devel | Sep 5, 2024 | Jul 3, 2024 |
| Alpine Linux | — | Upgrade ghostscript | Aug 22, 2024 | Jul 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade libgs-develUpgrade libgsUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-doc | Jul 23, 2024 | Jul 3, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-docUpgrade libgsUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade ghostscript-debugsource | Feb 17, 2025 | May 16, 2024 |
| Debian | — | Upgrade ghostscript | May 17, 2024 | May 17, 2024 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 23, 2024 | Jul 3, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.03.1 | Nov 19, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Oct 8, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Oct 8, 2024 | Jul 3, 2024 |
| Oracle_linux | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-tools-dvipdf | Oct 16, 2024 | May 16, 2024 |
| Redhat_linux | — | Upgrade libgs-debuginfoUpgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade ghostscript-gtk-debuginfoUpgrade libgs-develUpgrade ghostscriptNo solution exists | Sep 10, 2024 | Jul 3, 2024 |
| Rocky_linux | — | Upgrade ghostscript-tools-printingUpgrade libgs-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscriptUpgrade ghostscript-tools-fontsUpgrade ghostscript-debugsourceUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade libgs-devel | May 8, 2025 | Jul 3, 2024 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-develUpgrade ghostscript | Jul 3, 2024 | Jul 2, 2024 |
| Ubuntu | — | Upgrade libgs10-commonUpgrade libgs9Upgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-xUpgrade libgs-devUpgrade libgs9-commonUpgrade libgs-commonUpgrade libgs10 | Jun 21, 2024 | Jun 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub