Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-tools-fontsUpgrade ghostscriptUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printingUpgrade libgs | Sep 5, 2024 | Jul 3, 2024 |
| Alpine Linux | — | Upgrade ghostscript | Aug 22, 2024 | Jul 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade libgs | Jul 23, 2024 | Jul 3, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtkUpgrade ghostscript-debugsourceUpgrade libgs-develUpgrade libgsUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscript | Feb 17, 2025 | May 16, 2024 |
| Debian | — | Upgrade ghostscript | May 17, 2024 | May 17, 2024 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 23, 2024 | Jul 3, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.03.1 | Nov 19, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Oct 8, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Oct 8, 2024 | Jul 3, 2024 |
| Oracle_linux | — | Upgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-docUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade libgs-devel | Oct 16, 2024 | May 16, 2024 |
| Redhat_linux | — | Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsNo solution existsUpgrade ghostscript-docUpgrade ghostscript-debugsourceUpgrade ghostscript-gtk-debuginfoUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-debuginfoUpgrade libgs-debuginfoUpgrade libgs | Sep 10, 2024 | Jul 3, 2024 |
| Rocky_linux | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printingUpgrade libgs-debuginfo | May 8, 2025 | Jul 3, 2024 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-develUpgrade ghostscript | Jul 3, 2024 | Jul 2, 2024 |
| Ubuntu | — | Upgrade ghostscript-xUpgrade libgs-commonUpgrade libgs9-commonUpgrade libgs10Upgrade libgs-devUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs10-commonUpgrade libgs9 | Jun 21, 2024 | Jun 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub