Critical Out-of-Bounds Access Vulnerability in Ghostscript
Summary
ALPINE-CVE-2024-46956: An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution. Affects ghostscript versions < 10.04.0-r0. Fixed in 10.04.0-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is widely used for processing and rendering documents in various formats. The package is known for its ability to convert files, manipulate graphics, and serve as a backend for printing systems. However, it has been found to be vulnerable to a critical issue that can lead to arbitrary code execution.
Vulnerability Detail
An issue was discovered in psi/zfile.c in Artifex Ghostscript before version 10.04.0. The vulnerability arises from an out-of-bounds data access in the filenameforall function. This flaw can be exploited by an attacker to execute arbitrary code on the affected system, potentially leading to severe security breaches and unauthorized access to sensitive data.
How To Fix
Minimum fixed version
10.04.0-r0
This is the first release that contains the fix.
sudo apk add --upgrade ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the affected functionality in Ghostscript until the package is updated. However, this is not a long-term solution and updating the package is strongly recommended.
Conclusion
The Ghostscript package has a critical vulnerability that can lead to arbitrary code execution due to an out-of-bounds access issue. It is crucial for users to update to version 10.04.0-r0 or later to mitigate this risk. Regular monitoring for vulnerabilities using tools like Vulert is also recommended.
See every vulnerability recorded for ghostscript →
FAQ
The CVSS score of this vulnerability is 7.8, indicating a high severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to arbitrary code execution, allowing attackers to gain unauthorized access to systems and sensitive information.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
If immediate updates are not possible, refrain from using the affected functionalities and monitor for updates regularly until you can apply the patch.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
