Directory Traversal Vulnerability in Ghostscript - CVE-2024-46954
Summary
DEBIAN-CVE-2024-46954: An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Affects ghostscript versions < 10.04.0~dfsg-1. Fixed in 10.04.0~dfsg-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is widely used for processing and rendering documents in various formats. The package is essential for applications that require document manipulation, conversion, and printing. However, a vulnerability has been identified that could allow attackers to exploit the software through improper handling of UTF-8 encoding.
Vulnerability Detail
An issue was discovered in the decode_utf8 function located in base/gp_utf8.c in Artifex Ghostscript versions prior to 10.04.0. The vulnerability arises from the handling of overlong UTF-8 encoding, which can lead to directory traversal attacks. This means that an attacker could potentially manipulate file paths to access sensitive directories and files on the server, posing a significant security risk.
How To Fix
Minimum fixed version
10.04.0~dfsg-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the directories that may be targeted by the directory traversal attack. Additionally, validating and sanitizing user inputs can help mitigate the risk until the package is updated.
Conclusion
The Ghostscript vulnerability CVE-2024-46954 poses a serious risk due to potential directory traversal attacks. It is crucial for users to update to the latest version to safeguard their systems. Additionally, utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for ghostscript →
FAQ
CVE-2024-46954 is a vulnerability in Ghostscript that allows for directory traversal due to improper handling of overlong UTF-8 encoding.
You can check your version of Ghostscript by running 'gs --version' in the terminal. If it is below 10.04.0, it is affected.
Exploitation of this vulnerability could allow attackers to access sensitive files on the server, leading to data breaches or unauthorized access.
Yes, you can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check for vulnerabilities in your application without needing to sign up.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
