UNKNOWN READ Vulnerability in Ghostscript - OSV-2024-983
Summary
OSV-2024-983: UNKNOWN READ in ireclaim. Affects ghostscript versions >= bf0048d271aa6a4d9898997ada84cf89c197e791, < 0b894a24043aca1d62a149fd2e3100d3a46a53b2. Fixed in 0b894a24043aca1d62a149fd2e3100d3a46a53b2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is widely used for processing and rendering documents in various formats. The package is essential for applications that require document manipulation, conversion, and printing. However, it is susceptible to vulnerabilities that can lead to crashes or unauthorized access to sensitive data.
Vulnerability Detail
The vulnerability identified as OSV-2024-983 is an UNKNOWN READ issue in the Ghostscript package. This vulnerability was reported through OSS-Fuzz, indicating a potential crash state during the execution of the 'ireclaim' function. The crash can occur due to improper handling of memory, which may lead to unexpected behavior or exploitation by malicious actors. The affected versions of Ghostscript are those introduced before commit bf0048d271aa6a4d9898997ada84cf89c197e791 and fixed after commit 0b894a24043aca1d62a149fd2e3100d3a46a53b2.
How To Fix
Minimum fixed version
0b894a24043aca1d62a149fd2e3100d3a46a53b2
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If an immediate update is not possible, consider disabling features that utilize the 'ireclaim' function or avoid processing documents that may trigger this vulnerability until a patch is applied.
Conclusion
The UNKNOWN READ vulnerability in Ghostscript poses a significant risk, leading to potential crashes and exploitation. It is crucial for users to update their installations to the latest version to mitigate this risk. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for ghostscript →
FAQ
The UNKNOWN READ vulnerability can lead to application crashes and may expose the system to further attacks if exploited.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities in real-time.
Versions of Ghostscript introduced before commit bf0048d271aa6a4d9898997ada84cf89c197e791 are affected by this vulnerability.
Yes, you can disable features that utilize the 'ireclaim' function or avoid processing potentially vulnerable documents.
Detailed information can be found in the OSS-Fuzz report at https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537430.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
