Lucene search
MitreCVE-2024-29508HistoryJul 03, 2024 - 6:15 p.m.
CVE-2024-29508
2024-07-0318:15:04
mitre
web.nvd.nist.gov
37
artifex ghostscript
heap-based pointer disclosure
pdf_base_font_alloc
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
21.8%
Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
Affected configurations
Node
artifexghostscriptRange<10.03.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| artifex | ghostscript | * | cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2024-29508
2024-07-03 00:00:00
osv
osv
CVE-2024-29508
2024-07-03 18:15:00
ghostscript - security update
2024-08-29 00:00:00
ghostscript vulnerabilities
2024-07-15 11:27:33
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2547-1)
2024-07-18 00:00:00
Debian: Security Advisory (DSA-5760-1)
2024-08-30 00:00:00
Fedora: Security Advisory (FEDORA-2024-52192927d8)
2024-08-06 00:00:00
cvelist
cvelist
CVE-2024-29508
2024-07-03 00:00:00
nessus
nessus
SUSE SLES12 Security Update : ghostscript (SUSE-SU-2024:2547-1)
2024-07-22 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ghostscript (SUSE-SU-2024:2627-1)
2024-07-31 00:00:00
Amazon Linux 2 : ghostscript (ALAS-2024-2614)
2024-08-17 00:00:00
nvd
nvd
CVE-2024-29508
2024-07-03 18:15:04
redos
redos
ROS-20240826-06
2024-08-26 00:00:00
vulnrichment
vulnrichment
CVE-2024-29508
2024-07-03 00:00:00
redhatcve
redhatcve
CVE-2024-29508
2024-07-03 22:21:16
debiancve
debiancve
CVE-2024-29508
2024-07-03 18:15:04
amazon
amazon
Medium: ghostscript
2024-08-01 03:01:00
fedora
fedora
[SECURITY] Fedora 39 Update: ghostscript-10.02.1-7.fc39
2024-07-24 12:12:31
[SECURITY] Fedora 40 Update: ghostscript-10.02.1-12.fc40
2024-07-23 14:06:07
ubuntu
ubuntu
Ghostscript vulnerabilities
2024-07-15 00:00:00
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
21.8%
Related for CVE-2024-29508