An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-x11 | May 6, 2025 | Nov 10, 2024 |
| Debian | — | Upgrade ghostscript | Jul 27, 2026 | Jul 27, 2026 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Jan 24, 2025 | Nov 10, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.04.0 | Nov 19, 2024 | Nov 10, 2024 |
| Oracle_linux | — | Upgrade libgsUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-tools-printingUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-dvipdfUpgrade libgs-devel | May 1, 2025 | Nov 10, 2024 |
| Redhat_linux | — | Upgrade libgsUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscript-debuginfoNo solution existsUpgrade ghostscript-debugsourceUpgrade libgs-debuginfoUpgrade ghostscript-docUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfo | May 1, 2025 | Nov 10, 2024 |
| Rocky_linux | — | Upgrade libgs-develUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade libgs-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printingUpgrade ghostscript | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade ghostscript-develUpgrade ghostscriptUpgrade ghostscript-x11 | Dec 5, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs10Upgrade libgs9 | Nov 13, 2024 | Nov 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub