Summary
[9.54.0-18]
- RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
- RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | ghostscript | 0:9.54.0-18.el9_6 |
| Oracle Linux · 9 | ghostscript-doc | 0:9.54.0-18.el9_6 |
| Oracle Linux · 9 | ghostscript-tools-dvipdf | 0:9.54.0-18.el9_6 |
| Oracle Linux · 9 | ghostscript-tools-fonts | 0:9.54.0-18.el9_6 |
| Oracle Linux · 9 | ghostscript-tools-printing | 0:9.54.0-18.el9_6 |
| Oracle Linux · 9 | ghostscript-x11 | 0:9.54.0-18.el9_6 |
| Oracle Linux · 9 | libgs | 0:9.54.0-18.el9_6 |
| Oracle Linux · 9 | libgs-devel | 0:9.54.0-18.el9_6 |
Vulnerabilities 6
-
High 8.4
An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during hand…
-
High 8.4
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding…
-
High 7.8
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in P…
-
High 7.8
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the …
-
High 7.8
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenamefora…
-
Unscored —
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows …