Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-tools-fontsUpgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-x11 | Sep 5, 2024 | Jul 3, 2024 |
| Alpine Linux | — | Upgrade ghostscript | Aug 22, 2024 | Jul 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libgs-develUpgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-gtk | Jul 23, 2024 | Jul 3, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-gtkUpgrade ghostscript-debugsourceUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-gtk-debuginfoUpgrade libgs | Feb 17, 2025 | May 16, 2024 |
| Debian | — | Upgrade ghostscript | May 17, 2024 | May 17, 2024 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 23, 2024 | Jul 3, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.03.1 | Nov 19, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Oct 8, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Oct 8, 2024 | Jul 3, 2024 |
| Oracle_linux | — | Upgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printing | Oct 16, 2024 | May 16, 2024 |
| Redhat_linux | — | Upgrade libgsUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade ghostscript-debugsourceUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-x11No solution existsUpgrade ghostscript-x11-debuginfo | Sep 10, 2024 | Jul 3, 2024 |
| Rocky_linux | — | Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-printingUpgrade libgs-debuginfoUpgrade libgsUpgrade ghostscript-tools-dvipdf | May 8, 2025 | Jul 3, 2024 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-x11 | Jul 3, 2024 | Jul 2, 2024 |
| Ubuntu | — | Upgrade ghostscript-xUpgrade libgs-devUpgrade libgs9-commonUpgrade libgs-commonUpgrade libgs10Upgrade libgs9Upgrade libgs10-commonUpgrade ghostscriptUpgrade ghostscript-doc | Jun 21, 2024 | Jun 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub