Critical Code Execution Vulnerability in Ghostscript Package
Summary
ALPINE-CVE-2024-33871: An issue was discovered in Artifex Ghostscript before 10.03.1. Affects ghostscript versions < 10.04.0-r0. Fixed in 10.04.0-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is widely used for processing and rendering documents in various formats. The package is essential for applications that require document manipulation and printing capabilities. However, it has been found to be vulnerable to a critical issue that allows arbitrary code execution through a crafted PostScript document, which can be exploited by malicious actors.
Vulnerability Detail
An issue was discovered in Artifex Ghostscript before version 10.03.1, specifically in the contrib/opvp/gdevopvp.c file. This vulnerability allows arbitrary code execution via a custom Driver library, which can be exploited by providing a specially crafted PostScript document. The vulnerability arises because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library, leading to the loading of malicious libraries. This poses a significant risk as it can lead to unauthorized access and control over the affected system.
How To Fix
Minimum fixed version
10.04.0-r0
This is the first release that contains the fix.
sudo apk add --upgrade ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid processing untrusted PostScript documents and ensure that the Ghostscript interpreter is not exposed to untrusted sources until the package is updated.
Conclusion
The Ghostscript package has a critical vulnerability that allows arbitrary code execution through crafted PostScript documents. It is crucial to update to the patched versions to mitigate the risk. Users should also consider using Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for ghostscript →
FAQ
The vulnerability allows arbitrary code execution through a custom Driver library when processing crafted PostScript documents.
Ghostscript versions before 10.03.1 are affected, specifically in Alpine versions 3.18, 3.19, 3.20, 3.21, and 3.22.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Check your application against this vulnerability using the Vulert playground at Vulert Scanner.
As a workaround, avoid processing untrusted PostScript documents and limit access to the Ghostscript interpreter until an update can be applied.
Failure to address this vulnerability could lead to unauthorized code execution, compromising system security and potentially allowing attackers to gain control over the affected system.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
