ghostscript security update

2024-09-0300:00:00

linux.oracle.com

ghostscript update

security vulnerabilities

path traversal

command execution

format string injection

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

AI Score

6.8

Confidence

High

JSON

[9.54.0-17]

RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)

OSVersionArchitecturePackageVersionFilename
oracle linux9srcghostscript< 9.54.0-17.el9_4ghostscript-9.54.0-17.el9_4.src.rpm
oracle linux9srcghostscript< 9.54.0-17.el9_4ghostscript-9.54.0-17.el9_4.src.rpm
oracle linux9aarch64ghostscript< 9.54.0-17.el9_4ghostscript-9.54.0-17.el9_4.aarch64.rpm
oracle linux9noarchghostscript-doc< 9.54.0-17.el9_4ghostscript-doc-9.54.0-17.el9_4.noarch.rpm
oracle linux9aarch64ghostscript-tools-dvipdf< 9.54.0-17.el9_4ghostscript-tools-dvipdf-9.54.0-17.el9_4.aarch64.rpm
oracle linux9aarch64ghostscript-tools-fonts< 9.54.0-17.el9_4ghostscript-tools-fonts-9.54.0-17.el9_4.aarch64.rpm
oracle linux9aarch64ghostscript-tools-printing< 9.54.0-17.el9_4ghostscript-tools-printing-9.54.0-17.el9_4.aarch64.rpm
oracle linux9aarch64ghostscript-x11< 9.54.0-17.el9_4ghostscript-x11-9.54.0-17.el9_4.aarch64.rpm
oracle linux9aarch64libgs< 9.54.0-17.el9_4libgs-9.54.0-17.el9_4.aarch64.rpm
oracle linux9aarch64libgs-devel< 9.54.0-17.el9_4libgs-devel-9.54.0-17.el9_4.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	ghostscript	< 9.54.0-17.el9_4	ghostscript-9.54.0-17.el9_4.src.rpm
oracle linux	9	src	ghostscript	< 9.54.0-17.el9_4	ghostscript-9.54.0-17.el9_4.src.rpm
oracle linux	9	aarch64	ghostscript	< 9.54.0-17.el9_4	ghostscript-9.54.0-17.el9_4.aarch64.rpm
oracle linux	9	noarch	ghostscript-doc	< 9.54.0-17.el9_4	ghostscript-doc-9.54.0-17.el9_4.noarch.rpm
oracle linux	9	aarch64	ghostscript-tools-dvipdf	< 9.54.0-17.el9_4	ghostscript-tools-dvipdf-9.54.0-17.el9_4.aarch64.rpm
oracle linux	9	aarch64	ghostscript-tools-fonts	< 9.54.0-17.el9_4	ghostscript-tools-fonts-9.54.0-17.el9_4.aarch64.rpm
oracle linux	9	aarch64	ghostscript-tools-printing	< 9.54.0-17.el9_4	ghostscript-tools-printing-9.54.0-17.el9_4.aarch64.rpm
oracle linux	9	aarch64	ghostscript-x11	< 9.54.0-17.el9_4	ghostscript-x11-9.54.0-17.el9_4.aarch64.rpm
oracle linux	9	aarch64	libgs	< 9.54.0-17.el9_4	libgs-9.54.0-17.el9_4.aarch64.rpm
oracle linux	9	aarch64	libgs-devel	< 9.54.0-17.el9_4	libgs-devel-9.54.0-17.el9_4.aarch64.rpm