Vulnerability-Lookup

RHSA-2025:4362

Vulnerability from csaf_opensuse - Published: 2025-04-30 00:00 - Updated: 2026-09-20 11:54

Summary

security update for ghostscript

Severity

Moderate

Notes

Title of the patch: security update for ghostscript

Description of the patch: This security update provides a functional equivalent of RHSA-2025:4362. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2025:4362.

Patchnames: RHSA-2025:4362

CVE-2020-27792

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 10 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2023-46751

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 10 products, the same list as for CVE-2020-27792

Threats

Impact important

CVE-2024-46951

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 10 products, the same list as for CVE-2020-27792

Threats

Impact important

CVE-2024-46952

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 10 products, the same list as for CVE-2020-27792

Threats

Impact important

CVE-2024-46953

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 10 products, the same list as for CVE-2020-27792

Threats

Impact important

CVE-2024-46954

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 10 products, the same list as for CVE-2020-27792

Threats

Impact important

CVE-2024-46956

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 10 products, the same list as for CVE-2020-27792

Threats

Impact important

References

31 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://lists.suse.com/pipermail/suse-liberty-lin…	self
https://lists.suse.com/pipermail/suse-liberty-lin…	self
https://www.suse.com/security/cve/CVE-2020-27792/	self
https://www.suse.com/security/cve/CVE-2023-46751/	self
https://www.suse.com/security/cve/CVE-2024-46951/	self
https://www.suse.com/security/cve/CVE-2024-46952/	self
https://www.suse.com/security/cve/CVE-2024-46953/	self
https://www.suse.com/security/cve/CVE-2024-46954/	self
https://www.suse.com/security/cve/CVE-2024-46956/	self
https://www.suse.com/security/cve/CVE-2020-27792	external
https://bugzilla.suse.com/1202598	external
https://www.suse.com/security/cve/CVE-2023-46751	external
https://bugzilla.suse.com/1217871	external
https://www.suse.com/security/cve/CVE-2024-46951	external
https://bugzilla.suse.com/1232173	external
https://bugzilla.suse.com/1232265	external
https://www.suse.com/security/cve/CVE-2024-46952	external
https://bugzilla.suse.com/1232173	external
https://bugzilla.suse.com/1232266	external
https://www.suse.com/security/cve/CVE-2024-46953	external
https://bugzilla.suse.com/1232173	external
https://bugzilla.suse.com/1232267	external
https://www.suse.com/security/cve/CVE-2024-46954	external
https://bugzilla.suse.com/1232173	external
https://bugzilla.suse.com/1232268	external
https://bugzilla.suse.com/1257699	external
https://www.suse.com/security/cve/CVE-2024-46956	external
https://bugzilla.suse.com/1232173	external
https://bugzilla.suse.com/1232270	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for ghostscript",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2025:4362.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:4362.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2025:4362",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_4362.json"
      },
      {
        "category": "self",
        "summary": "URL for RHSA-2025:4362",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-May/001092.html"
      },
      {
        "category": "self",
        "summary": "E-Mail link for RHSA-2025:4362",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-May/001092.html"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-27792 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-27792/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-46751 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-46751/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-46951 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-46951/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-46952 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-46952/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-46953 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-46953/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-46954 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-46954/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-46956 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-46956/"
      }
    ],
    "title": "security update for ghostscript",
    "tracking": {
      "current_release_date": "2026-09-20T11:54:00Z",
      "generator": {
        "date": "2025-04-30T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2025:4362",
      "initial_release_date": "2025-04-30T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-04-30T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:54:00Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libgs-0:9.27-16.el8_10.i686",
                "product": {
                  "name": "libgs-0:9.27-16.el8_10.i686",
                  "product_id": "libgs-0:9.27-16.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libgs@9.27-16.el8_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgs-devel-0:9.27-16.el8_10.i686",
                "product": {
                  "name": "libgs-devel-0:9.27-16.el8_10.i686",
                  "product_id": "libgs-devel-0:9.27-16.el8_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libgs-devel@9.27-16.el8_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ghostscript-doc-0:9.27-16.el8_10.noarch",
                "product": {
                  "name": "ghostscript-doc-0:9.27-16.el8_10.noarch",
                  "product_id": "ghostscript-doc-0:9.27-16.el8_10.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/ghostscript-doc@9.27-16.el8_10?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ghostscript-0:9.27-16.el8_10.x86_64",
                "product": {
                  "name": "ghostscript-0:9.27-16.el8_10.x86_64",
                  "product_id": "ghostscript-0:9.27-16.el8_10.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:artifex:ghostscript:9.27:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/ghostscript@9.27-16.el8_10?arch=x86_64\u0026upstream=ghostscript-0:9.27-16.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
                "product": {
                  "name": "ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
                  "product_id": "ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/ghostscript-tools-dvipdf@9.27-16.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
                "product": {
                  "name": "ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
                  "product_id": "ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/ghostscript-tools-fonts@9.27-16.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
                "product": {
                  "name": "ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
                  "product_id": "ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/ghostscript-tools-printing@9.27-16.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ghostscript-x11-0:9.27-16.el8_10.x86_64",
                "product": {
                  "name": "ghostscript-x11-0:9.27-16.el8_10.x86_64",
                  "product_id": "ghostscript-x11-0:9.27-16.el8_10.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:artifex:ghostscript:9.27:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/ghostscript-x11@9.27-16.el8_10?arch=x86_64\u0026upstream=ghostscript-0:9.27-16.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgs-0:9.27-16.el8_10.x86_64",
                "product": {
                  "name": "libgs-0:9.27-16.el8_10.x86_64",
                  "product_id": "libgs-0:9.27-16.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libgs@9.27-16.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgs-devel-0:9.27-16.el8_10.x86_64",
                "product": {
                  "name": "libgs-devel-0:9.27-16.el8_10.x86_64",
                  "product_id": "libgs-devel-0:9.27-16.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libgs-devel@9.27-16.el8_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 8",
                "product": {
                  "name": "SUSE Liberty Linux 8",
                  "product_id": "SUSE Liberty Linux 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ghostscript-0:9.27-16.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64"
        },
        "product_reference": "ghostscript-0:9.27-16.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ghostscript-doc-0:9.27-16.el8_10.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch"
        },
        "product_reference": "ghostscript-doc-0:9.27-16.el8_10.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64"
        },
        "product_reference": "ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64"
        },
        "product_reference": "ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ghostscript-tools-printing-0:9.27-16.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64"
        },
        "product_reference": "ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ghostscript-x11-0:9.27-16.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64"
        },
        "product_reference": "ghostscript-x11-0:9.27-16.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgs-0:9.27-16.el8_10.i686 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686"
        },
        "product_reference": "libgs-0:9.27-16.el8_10.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgs-0:9.27-16.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64"
        },
        "product_reference": "libgs-0:9.27-16.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgs-devel-0:9.27-16.el8_10.i686 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686"
        },
        "product_reference": "libgs-devel-0:9.27-16.el8_10.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgs-devel-0:9.27-16.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
        },
        "product_reference": "libgs-devel-0:9.27-16.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-27792",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-27792"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A heap-based buffer overwrite vulnerability was found in GhostScript\u0027s lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
          "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-27792",
          "url": "https://www.suse.com/security/cve/CVE-2020-27792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1202598 for CVE-2020-27792",
          "url": "https://bugzilla.suse.com/1202598"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-04-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-27792"
    },
    {
      "cve": "CVE-2023-46751",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-46751"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
          "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-46751",
          "url": "https://www.suse.com/security/cve/CVE-2023-46751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217871 for CVE-2023-46751",
          "url": "https://bugzilla.suse.com/1217871"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-04-30T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-46751"
    },
    {
      "cve": "CVE-2024-46951",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-46951"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
          "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-46951",
          "url": "https://www.suse.com/security/cve/CVE-2024-46951"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232173 for CVE-2024-46951",
          "url": "https://bugzilla.suse.com/1232173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232265 for CVE-2024-46951",
          "url": "https://bugzilla.suse.com/1232265"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-04-30T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-46951"
    },
    {
      "cve": "CVE-2024-46952",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-46952"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
          "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-46952",
          "url": "https://www.suse.com/security/cve/CVE-2024-46952"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232173 for CVE-2024-46952",
          "url": "https://bugzilla.suse.com/1232173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232266 for CVE-2024-46952",
          "url": "https://bugzilla.suse.com/1232266"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-04-30T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-46952"
    },
    {
      "cve": "CVE-2024-46953",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-46953"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
          "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-46953",
          "url": "https://www.suse.com/security/cve/CVE-2024-46953"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232173 for CVE-2024-46953",
          "url": "https://bugzilla.suse.com/1232173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232267 for CVE-2024-46953",
          "url": "https://bugzilla.suse.com/1232267"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-04-30T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-46953"
    },
    {
      "cve": "CVE-2024-46954",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-46954"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
          "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-46954",
          "url": "https://www.suse.com/security/cve/CVE-2024-46954"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232173 for CVE-2024-46954",
          "url": "https://bugzilla.suse.com/1232173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232268 for CVE-2024-46954",
          "url": "https://bugzilla.suse.com/1232268"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257699 for CVE-2024-46954",
          "url": "https://bugzilla.suse.com/1257699"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-04-30T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-46954"
    },
    {
      "cve": "CVE-2024-46956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-46956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
          "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
          "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-46956",
          "url": "https://www.suse.com/security/cve/CVE-2024-46956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232173 for CVE-2024-46956",
          "url": "https://bugzilla.suse.com/1232173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1232270 for CVE-2024-46956",
          "url": "https://bugzilla.suse.com/1232270"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:ghostscript-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-doc-0:9.27-16.el8_10.noarch",
            "SUSE Liberty Linux 8:ghostscript-tools-dvipdf-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-fonts-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-tools-printing-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:ghostscript-x11-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-0:9.27-16.el8_10.x86_64",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.i686",
            "SUSE Liberty Linux 8:libgs-devel-0:9.27-16.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-04-30T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-46956"
    }
  ]
}

CVE-2020-27792 (GCVE-0-2020-27792)

Vulnerability from cvelistv5 – Published: 2022-08-19 22:46 – Updated: 2025-11-20 14:54

Title

Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c

Summary

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

redhat redhat root Scorecard

References

7 references

URL	Tags
https://access.redhat.com/errata/RHSA-2025:4362	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2020-27792	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2247179	issue-trackingx_refsource_REDHAT
https://git.ghostscript.com/?p=ghostpdl.git;a=com…
https://bugs.ghostscript.com/show_bug.cgi?id=701844	x_refsource_MISCx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=c…	x_refsource_MISCx_transferred
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLISTx_transferred

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:9.27-16.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2019-11-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T16:25:42.474Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2020-27792"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.ghostscript.com/show_bug.cgi?id=701844"
          },
          {
            "name": "RHBZ#2247179",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247179"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e8fbe9822afb36e8a0eafc2b7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe9822afb36e8a0eafc2b7"
          },
          {
            "name": "[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00005.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "ghostscript",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.27-16.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "ghostscript",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "ghostscript",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "ghostscript",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2019-11-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A heap-based buffer overwrite vulnerability was found in GhostScript\u0027s lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-11-20T14:54:35.350Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2025:4362",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:4362"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2020-27792"
        },
        {
          "name": "RHBZ#2247179",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247179"
        },
        {
          "url": "https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe9822afb36e8a0eafc2b7"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-10-31T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2019-11-06T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Ghostscript: heap buffer over write vulnerability in ghostscript\u0027s lp8000_print_page() in gdevlp8k.c",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_redhatCweChain": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2020-27792",
    "datePublished": "2022-08-19T22:46:08.000Z",
    "dateReserved": "2020-10-27T00:00:00.000Z",
    "dateUpdated": "2025-11-20T14:54:35.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-46751 (GCVE-0-2023-46751)

Vulnerability from cvelistv5 – Published: 2023-12-06 00:00 – Updated: 2024-08-02 20:53

Summary

An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

4 references

URL	Tags
https://ghostscript.com/
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=c…
https://bugs.ghostscript.com/show_bug.cgi?id=707264
https://www.debian.org/security/2023/dsa-5578	vendor-advisory

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T20:53:21.866Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://ghostscript.com/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=dcdbc595c13c9d11d235702dff46bb74c80f7698"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707264"
          },
          {
            "name": "DSA-5578",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5578"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-16T01:06:36.221Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://ghostscript.com/"
        },
        {
          "url": "https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=dcdbc595c13c9d11d235702dff46bb74c80f7698"
        },
        {
          "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707264"
        },
        {
          "name": "DSA-5578",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2023/dsa-5578"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-46751",
    "datePublished": "2023-12-06T00:00:00.000Z",
    "dateReserved": "2023-10-26T00:00:00.000Z",
    "dateUpdated": "2024-08-02T20:53:21.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-46951 (GCVE-0-2024-46951)

Vulnerability from cvelistv5 – Published: 2024-11-10 00:00 – Updated: 2025-11-03 22:19

Summary

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-12 19:59 UTC

CWE

n/a
CWE-824 - Access of Uninitialized Pointer

Assigner

mitre mitre root Scorecard

References

5 references

URL	Tags
https://bugs.ghostscript.com/show_bug.cgi?id=707991
https://github.com/ArtifexSoftware/ghostpdl/blob/…
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/gho…
https://www.suse.com/support/update/announcement/…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
artifex	ghostscript	Affected: 10.04.0 cpe:2.3:a:artifex:ghostscript:10.04.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:artifex:ghostscript:10.04.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ghostscript",
            "vendor": "artifex",
            "versions": [
              {
                "status": "affected",
                "version": "10.04.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-46951",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-12T19:59:49.348169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-824",
                "description": "CWE-824 Access of Uninitialized Pointer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-12T20:22:36.377Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:19:50.582Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-10T21:08:22.555Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707991"
        },
        {
          "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html"
        },
        {
          "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa7d1362880673408a6fbe8719b4f8"
        },
        {
          "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-46951",
    "datePublished": "2024-11-10T00:00:00.000Z",
    "dateReserved": "2024-09-16T00:00:00.000Z",
    "dateUpdated": "2025-11-03T22:19:50.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-46952 (GCVE-0-2024-46952)

Vulnerability from cvelistv5 – Published: 2024-11-10 00:00 – Updated: 2024-11-12 20:29

Summary

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-12 20:27 UTC

CWE

n/a
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

mitre mitre root Scorecard

References

3 references

URL	Tags
https://bugs.ghostscript.com/show_bug.cgi?id=708001
https://github.com/ArtifexSoftware/ghostpdl/blob/…
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/gho…

Impacted products

1 product

Vendor	Product	Version
artifex	ghostscript	Affected: 10.04.0 cpe:2.3:a:artifex:ghostscript:10.04.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:artifex:ghostscript:10.04.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ghostscript",
            "vendor": "artifex",
            "versions": [
              {
                "status": "affected",
                "version": "10.04.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-46952",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-12T20:27:55.483905Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-12T20:29:15.751Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-10T21:10:52.025Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://bugs.ghostscript.com/show_bug.cgi?id=708001"
        },
        {
          "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html"
        },
        {
          "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-46952",
    "datePublished": "2024-11-10T00:00:00.000Z",
    "dateReserved": "2024-09-16T00:00:00.000Z",
    "dateUpdated": "2024-11-12T20:29:15.751Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-46953 (GCVE-0-2024-46953)

Vulnerability from cvelistv5 – Published: 2024-11-10 00:00 – Updated: 2025-11-03 22:19

Summary

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-12 19:59 UTC

CWE

n/a
CWE-190 - Integer Overflow or Wraparound

Assigner

mitre mitre root Scorecard

References

5 references

URL	Tags
https://bugs.ghostscript.com/show_bug.cgi?id=707793
https://github.com/ArtifexSoftware/ghostpdl/blob/…
https://www.suse.com/support/update/announcement/…
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/gho…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
artifex	ghostscript	Affected: 10.04.0 cpe:2.3:a:artifex:ghostscript:10.04.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:artifex:ghostscript:10.04.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ghostscript",
            "vendor": "artifex",
            "versions": [
              {
                "status": "affected",
                "version": "10.04.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-46953",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-12T19:59:32.165336Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-190",
                "description": "CWE-190 Integer Overflow or Wraparound",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-12T20:19:56.551Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:19:52.060Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-10T21:14:20.813Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707793"
        },
        {
          "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html"
        },
        {
          "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/"
        },
        {
          "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa3abec4cff12951022b192dda3c00"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-46953",
    "datePublished": "2024-11-10T00:00:00.000Z",
    "dateReserved": "2024-09-16T00:00:00.000Z",
    "dateUpdated": "2025-11-03T22:19:52.060Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-46954 (GCVE-0-2024-46954)

Vulnerability from cvelistv5 – Published: 2024-11-10 00:00 – Updated: 2024-11-12 20:26

Summary

An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-12 20:24 UTC

CWE

n/a
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

mitre mitre root Scorecard

References

3 references

URL	Tags
https://bugs.ghostscript.com/show_bug.cgi?id=707788
https://github.com/ArtifexSoftware/ghostpdl/blob/…
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/gho…

Impacted products

1 product

Vendor	Product	Version
artifex	ghostscript	Affected: 10.04.0 cpe:2.3:a:artifex:ghostscript:10.04.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:artifex:ghostscript:10.04.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ghostscript",
            "vendor": "artifex",
            "versions": [
              {
                "status": "affected",
                "version": "10.04.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-46954",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-12T20:24:52.023676Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-12T20:26:23.499Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-10T21:18:47.321Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707788"
        },
        {
          "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html"
        },
        {
          "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=55f587dd039282316f512e1bea64218fd991f934"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-46954",
    "datePublished": "2024-11-10T00:00:00.000Z",
    "dateReserved": "2024-09-16T00:00:00.000Z",
    "dateUpdated": "2024-11-12T20:26:23.499Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-46956 (GCVE-0-2024-46956)

Vulnerability from cvelistv5 – Published: 2024-11-10 00:00 – Updated: 2025-11-03 22:19

Summary

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-30 00:00 UTC

CWE

n/a
CWE-125 - Out-of-bounds Read

Assigner

mitre mitre root Scorecard

References

5 references

URL	Tags
https://bugs.ghostscript.com/show_bug.cgi?id=707895
https://github.com/ArtifexSoftware/ghostpdl/blob/…
https://www.suse.com/support/update/announcement/…
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/gho…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

1 product

Vendor	Product	Version
artifex	ghostscript	Affected: 10.04.0 cpe:2.3:a:artifex:ghostscript:10.04.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:artifex:ghostscript:10.04.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ghostscript",
            "vendor": "artifex",
            "versions": [
              {
                "status": "affected",
                "version": "10.04.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-46956",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-30T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-31T03:55:57.518Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:19:54.977Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-10T21:23:15.906Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://bugs.ghostscript.com/show_bug.cgi?id=707895"
        },
        {
          "url": "https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html"
        },
        {
          "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/"
        },
        {
          "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32cd3ed26c24327de714bf2c3ed6ca"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-46956",
    "datePublished": "2024-11-10T00:00:00.000Z",
    "dateReserved": "2024-09-16T00:00:00.000Z",
    "dateUpdated": "2025-11-03T22:19:54.977Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2025:4362

CVE-2020-27792 (GCVE-0-2020-27792)

CVE-2023-46751 (GCVE-0-2023-46751)

CVE-2024-46951 (GCVE-0-2024-46951)

CVE-2024-46952 (GCVE-0-2024-46952)

CVE-2024-46953 (GCVE-0-2024-46953)

CVE-2024-46954 (GCVE-0-2024-46954)

CVE-2024-46956 (GCVE-0-2024-46956)

Tags

Sightings

Nomenclature

Related by attack behaviour