AIKIDO-2024-10284
ArtifexSoftware.ghostpdl is vulnerable to Out-of-bounds Write
80
High Risk
This Affects:
ArtifexSoftware.ghostpdlTL;DR
Affected versions of the package are vulnerable to multiple cves (CVE-2024-46951, CVE-2024-46952, CVE-2024-46953, CVE-2024-46954, CVE-2024-46955 and CVE-2024-46956), all regarding buffer overflows.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
ArtifexSoftware.ghostpdl is vulnerable to Out-of-bounds Write in versions 9.00 - 10.03.0.
How to fix this
Upgrade the ArtifexSoftware.ghostpdl library to the patch version.
Links
git.ghostscript.com/?p=ghostpdl.git;a=log;h=refs/tags/ghostpdl-10.04.0bugs.ghostscript.com/show_bug.cgi?id=707991cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa7d1362880673408a6fbe8719b4f8
github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.htmlsuse.com/support/update/announcement/2024/suse-su-20243942-1/lists.debian.org/debian-lts-announce/2024/11/msg00023.html
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.