CVE-2024-29507
CVE-2024-29507
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.
CVSS 5.4 · Medium · EPSS 0.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ghostscript Debian:12
- Versions
- 10.0.0~dfsg-11
- 10.0.0~dfsg-11+deb12u1
- 10.0.0~dfsg-11+deb12u2
- 10.0.0~dfsg-11+deb12u3
- 10.0.0~dfsg-11+deb12u4
- Affected ranges
- ECOSYSTEM: < 10.0.0~dfsg-11+deb12u5
Update to 10.0.0~dfsg-11+deb12u5
ghostscript Debian:13
- Affected ranges
- ECOSYSTEM: < 10.03.0~dfsg-1
Update to 10.03.0~dfsg-1
ghostscript Debian:14
- Affected ranges
- ECOSYSTEM: < 10.03.0~dfsg-1
Update to 10.03.0~dfsg-1
ghostscript Ubuntu:24.04:LTS
- Versions
- 10.01.2~dfsg1-0ubuntu2
- 10.01.2~dfsg1-0ubuntu2.1
- 10.02.1~dfsg1-0ubuntu1
- 10.02.1~dfsg1-0ubuntu2
- 10.02.1~dfsg1-0ubuntu5
- 10.02.1~dfsg1-0ubuntu6
- 10.02.1~dfsg1-0ubuntu7
- 10.02.1~dfsg1-0ubuntu7.1
- Affected ranges
- ECOSYSTEM: < 10.02.1~dfsg1-0ubuntu7.3
Update to 10.02.1~dfsg1-0ubuntu7.3