Lucene search
Gentoo FoundationGLSA-202409-03HistorySep 22, 2024 - 12:00 a.m.
GPL Ghostscript: Multiple Vulnerabilities
2024-09-2200:00:00
Gentoo Foundation
security.gentoo.org
2
ghostscript interpreter
postscript language
pdf
vulnerabilities
cve
upgrade
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
Low
Background
Ghostscript is an interpreter for the PostScript language and for PDF.
Description
Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details.
Impact
Please review the referenced CVE identifiers for details.
Workaround
There is no known workaround at this time.
Resolution
All GPL Ghostscript users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/ghostscript-gpl-10.03.1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | app-text/ghostscript-gpl | < 10.03.1 | UNKNOWN |
Related
osv
osv
ghostscript vulnerabilities
2024-06-17 17:35:07
ghostscript-10.03.1-1.1 on GA media
2024-07-03 00:00:00
ghostscript - security update
2024-05-15 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Ghostscript vulnerabilities (USN-6835-1)
2024-06-18 00:00:00
Artifex Ghostscript < 10.03.1 Multiple Vulnerabilities
2024-06-13 00:00:00
GLSA-202409-03 : GPL Ghostscript: Multiple Vulnerabilities
2024-09-22 00:00:00
debian
debian
[SECURITY] [DSA 5692-1] ghostscript security update
2024-05-15 20:07:17
ubuntu
ubuntu
Ghostscript vulnerabilities
2024-06-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6835-1)
2024-06-18 00:00:00
Debian: Security Advisory (DSA-5692-1)
2024-05-16 00:00:00
Mageia: Security Advisory (MGASA-2024-0192)
2024-05-24 00:00:00
redos
redos
ROS-20240923-05
2024-09-23 00:00:00
mageia
mageia
Updated ghostscript packages fix security vulnerabilities
2024-05-23 07:22:43
Updated ghostscript packages fix security vulnerability
2024-05-16 20:29:32
redhat
redhat
(RHSA-2024:6466) Moderate: ghostscript security update
2024-09-09 01:03:04
(RHSA-2024:6197) Moderate: ghostscript security update
2024-09-03 05:31:24
(RHSA-2024:3999) Important: ghostscript security update
2024-06-20 04:58:53
oraclelinux
oraclelinux
ghostscript security update
2024-09-03 00:00:00
ghostscript security update
2024-09-17 00:00:00
ghostscript security update
2024-06-20 00:00:00
almalinux
almalinux
Moderate: ghostscript security update
2024-09-03 00:00:00
Important: ghostscript security update
2024-06-20 00:00:00
Important: ghostscript security update
2024-06-20 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: ghostscript-10.02.1-5.fc39
2024-07-09 01:42:21
[SECURITY] Fedora 40 Update: ghostscript-10.02.1-10.fc40
2024-07-02 20:16:52
[SECURITY] Fedora 40 Update: ghostscript-10.02.1-9.fc40
2024-06-18 10:07:35
amazon
amazon
Medium: ghostscript
2024-08-01 03:01:00
Medium: ghostscript
2024-05-23 22:04:00
Important: ghostscript
2024-06-06 20:17:00
cvelist
cvelist
alpinelinux
alpinelinux
vulnrichment
vulnrichment
nvd
nvd
ubuntucve
ubuntucve
redhatcve
redhatcve
debiancve
debiancve
veracode
veracode
Remote Code Execution
2024-05-18 20:55:19
cve
cve
wolfi
wolfi
CVE-2023-52722 vulnerabilities
2024-09-27 09:13:12
CVE-2024-33870 vulnerabilities
2024-09-27 09:13:12
CVE-2024-33869 vulnerabilities
2024-09-27 09:13:12
rocky
rocky
ghostscript security update
2024-07-02 14:11:30
ghostscript security update
2024-07-02 14:10:24
attackerkb
attackerkb
CVE-2024-29510
2024-07-03 00:00:00
metasploit
metasploit
Ghostscript Command Execution via Format String
2024-07-09 16:34:27
zdt
zdt
Ghostscript Command Execution / Format String Exploit
2024-07-22 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-29510
2024-07-09 13:27:40
packetstorm
packetstorm
Ghostscript Command Execution / Format String
2024-07-22 00:00:00
thn
thn
CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
2024-07-16 04:01:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 07/26/2024
2024-07-26 18:07:13
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
Low
Related for GLSA-202409-03