An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libgsUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade ghostscript | May 6, 2025 | Nov 10, 2024 |
| Debian | — | Upgrade ghostscript | Jul 27, 2026 | Jul 27, 2026 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Jan 24, 2025 | Nov 10, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.04.0 | Nov 19, 2024 | Nov 10, 2024 |
| Oracle_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-doc | May 1, 2025 | Nov 10, 2024 |
| Redhat_linux | — | Upgrade ghostscript-x11Upgrade libgsUpgrade libgs-develUpgrade ghostscript-tools-fontsNo solution existsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-doc | May 1, 2025 | Nov 10, 2024 |
| Rocky_linux | — | Upgrade libgs-debuginfoUpgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-printingUpgrade ghostscript-debugsourceUpgrade ghostscript-x11-debuginfoUpgrade ghostscript | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade ghostscript-develUpgrade ghostscriptUpgrade ghostscript-x11 | Dec 5, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade libgs10Upgrade libgs9Upgrade ghostscript | Nov 13, 2024 | Nov 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub