AIKIDO-2024-10284

ArtifexSoftware.ghostpdl is vulnerable to Out-of-bounds Write

Out-of-bounds WriteCVE-2024-46951 Published Sep 19, 2024

High Risk

This Affects:

ArtifexSoftware.ghostpdl

9.00 - 10.03.0

Fixed in 10.04.0

Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to multiple cves (CVE-2024-46951, CVE-2024-46952, CVE-2024-46953, CVE-2024-46954, CVE-2024-46955 and CVE-2024-46956), all regarding buffer overflows.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

ArtifexSoftware.ghostpdl is vulnerable to Out-of-bounds Write in versions 9.00 - 10.03.0.

How to fix this

Upgrade the ArtifexSoftware.ghostpdl library to the patch version.

High Risk

This Affects:

ArtifexSoftware.ghostpdl

9.00 - 10.03.0

Fixed in 10.04.0

Are you affected? Scan for Free

Links

git.ghostscript.com/?p=ghostpdl.git;a=log;h=refs/tags/ghostpdl-10.04.0

bugs.ghostscript.com/show_bug.cgi?id=707991

cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa7d1362880673408a6fbe8719b4f8

github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html

suse.com/support/update/announcement/2024/suse-su-20243942-1/

lists.debian.org/debian-lts-announce/2024/11/msg00023.html

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free

Book a Demo

Free. No credit card required.

Company

Resources

Industries

Use Cases

Compare

Legal

Connect

hello@aikido.dev

Security

Stay up to date with all updates

LinkedIn YouTube X

Keizer Karelstraat 15, 9000, Ghent, Belgium

95 Third St, 2nd Fl, San Francisco, CA 94103, US

Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK

Ghent, Belgium | San Francisco, US

SOC 2Compliant

ISO 27001Compliant