CVE-2024-29509
CVE-2024-29509
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle.
CVSS 8.8 · High · EPSS 1.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ghostscript Debian:12
- Versions
- 10.0.0~dfsg-11
- 10.0.0~dfsg-11+deb12u1
- 10.0.0~dfsg-11+deb12u2
- 10.0.0~dfsg-11+deb12u3
- 10.0.0~dfsg-11+deb12u4
- Affected ranges
- ECOSYSTEM: < 10.0.0~dfsg-11+deb12u5
Update to 10.0.0~dfsg-11+deb12u5
ghostscript Debian:13
- Affected ranges
- ECOSYSTEM: < 10.03.0~dfsg-1
Update to 10.03.0~dfsg-1
ghostscript Debian:14
- Affected ranges
- ECOSYSTEM: < 10.03.0~dfsg-1
Update to 10.03.0~dfsg-1
ghostscript Ubuntu:22.04:LTS
- Versions
- 9.54.0~dfsg1-0ubuntu2
- 9.55.0~dfsg1-0ubuntu4
- 9.55.0~dfsg1-0ubuntu5
- 9.55.0~dfsg1-0ubuntu5.1
- 9.55.0~dfsg1-0ubuntu5.2
- 9.55.0~dfsg1-0ubuntu5.3
- 9.55.0~dfsg1-0ubuntu5.4
- 9.55.0~dfsg1-0ubuntu5.5
- 9.55.0~dfsg1-0ubuntu5.6
- 9.55.0~dfsg1-0ubuntu5.7
- Affected ranges
- ECOSYSTEM: < 9.55.0~dfsg1-0ubuntu5.9
Update to 9.55.0~dfsg1-0ubuntu5.9
ghostscript Ubuntu:24.04:LTS
- Versions
- 10.01.2~dfsg1-0ubuntu2
- 10.01.2~dfsg1-0ubuntu2.1
- 10.02.1~dfsg1-0ubuntu1
- 10.02.1~dfsg1-0ubuntu2
- 10.02.1~dfsg1-0ubuntu5
- 10.02.1~dfsg1-0ubuntu6
- 10.02.1~dfsg1-0ubuntu7
- 10.02.1~dfsg1-0ubuntu7.1
- Affected ranges
- ECOSYSTEM: < 10.02.1~dfsg1-0ubuntu7.3
Update to 10.02.1~dfsg1-0ubuntu7.3