Ghostscript: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• Critical 9.8
  CVE-2024-46957

  Mellium allows Authentication Bypass by Spoofing

  Mellium mellium.im/xmpp 0.0.1 through 0.21.4 allows response spoofing if the implementation uses predictable IDs because the stanza type is not checked. This is fixed in 0.22.0.

  mellium.im/xmpp Go
  Sep 24, 2024
• High 8.4
  CVE-2024-46952

  An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during hand…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• High 8.4
  CVE-2024-46954

  An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• High 7.8
  CVE-2024-46951

  An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in P…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• High 7.8
  CVE-2024-46953

  An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the …

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• High 7.8
  CVE-2024-46956

  An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenamefora…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024
• Medium 5.5
  CVE-2024-46955

  An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when read…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Nov 10, 2024

Revision history

1. 2025-06-30 #16

   Neue Updates von Oracle Linux aufgenommen

2. 2025-06-02 #15

   Neue Updates von XEROX aufgenommen

3. 2025-05-22 #14

   Neue Updates von Oracle Linux aufgenommen

4. 2025-05-13 #13

   Neue Updates von Red Hat aufgenommen

5. 2025-05-12 #12

   Neue Updates von Amazon aufgenommen

6. 2025-05-01 #11

   Neue Updates von Oracle Linux aufgenommen

7. 2025-04-29 #10

   Neue Updates von Red Hat aufgenommen

8. 2025-02-25 #9

   Neue Updates von Amazon aufgenommen

9. 2025-01-22 #8

   Neue Updates von Gentoo aufgenommen

10. 2024-12-19 #7

    Neue Updates von Amazon aufgenommen

11. 2024-12-05 #6

    Neue Updates von Ubuntu aufgenommen

12. 2024-11-24 #5

    Neue Updates von Debian aufgenommen

13. 2024-11-12 #4

    Neue Updates von Fedora und Ubuntu aufgenommen

14. 2024-11-11 #3

    Neue Updates von Debian aufgenommen

15. 2024-11-10 #2

    CVE's ergänzt

16. 2024-11-07 #1

    Initiale Fassung

References

• SUSE-SU-2024:3942-1 Security Advisory vom 2024-11-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/TZB53HSOSSBHANRB2PL7HMID2BVO73DG/
• SUSE-SU-2024:3941-1 Security Advisory vom 2024-11-07
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019788.html
• Debian Security Advisory DSA-5808 vom 2024-11-11
  https://lists.debian.org/debian-security-announce/2024/msg00222.html
• Fedora Security Advisory FEDORA-2024-B1877232CE vom 2024-11-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-b1877232ce
• Fedora Security Advisory FEDORA-2024-69AF78A508 vom 2024-11-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-69af78a508
• Ubuntu Security Notice USN-7103-1 vom 2024-11-12
  https://ubuntu.com/security/notices/USN-7103-1
• Debian Security Advisory DLA-3965 vom 2024-11-24
  https://lists.debian.org/debian-lts-announce/2024/11/msg00023.html
• Ubuntu Security Notice USN-7138-1 vom 2024-12-05
  https://ubuntu.com/security/notices/USN-7138-1
• Amazon Linux Security Advisory ALAS-2024-2708 vom 2024-12-20
  https://alas.aws.amazon.com/AL2/ALAS-2024-2708.html
• Gentoo Linux Security Advisory GLSA-202501-06 vom 2025-01-23
  https://security.gentoo.org/glsa/202501-06
• Amazon Linux Security Advisory ALAS-2025-2760 vom 2025-02-25
  https://alas.aws.amazon.com/AL2/ALAS-2025-2760.html
• Red Hat Security Advisory RHSA-2025:4362 vom 2025-04-30
  https://access.redhat.com/errata/RHSA-2025:4362
• Oracle Linux Security Advisory ELSA-2025-4362 vom 2025-04-30
  https://linux.oracle.com/errata/ELSA-2025-4362.html
• Amazon Linux Security Advisory ALAS-2025-1978 vom 2025-05-13
  https://alas.aws.amazon.com/ALAS-2025-1978.html
• Red Hat Security Advisory RHSA-2025:7499 vom 2025-05-13
  https://access.redhat.com/errata/RHSA-2025:7499
• Red Hat Security Advisory RHSA-2025:7422 vom 2025-05-13
  https://access.redhat.com/errata/RHSA-2025:7422
• Oracle Linux Security Advisory ELSA-2025-7422 vom 2025-05-22
  https://linux.oracle.com/errata/ELSA-2025-7422.html
• Oracle Linux Security Advisory ELSA-2025-7586 vom 2025-05-23
  https://linux.oracle.com/errata/ELSA-2025-7586.html
• XEROX Security Advisory XRX25-012 vom 2025-06-02
  https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf
• Oracle Linux Security Advisory ELSA-2025-7499 vom 2025-06-30
  https://linux.oracle.com/errata/ELSA-2025-7499.html
• Oracle Linux Security Advisory ELSA-2025-7593 vom 2025-06-30
  https://linux.oracle.com/errata/ELSA-2025-7593.html