USN-7103-1: ghostscript Ubuntu
Vulnerability summary
USN-7103-1 is a vulnerability in ghostscript Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 12-11-2024PublishedVulnerability first disclosed.
- 22-04-2026Last modifiedVulnerability information updated.
Description
ghostscript vulnerabilities It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-46951, CVE-2024-46953, CVE-2024-46955, CVE-2024-46956) It was discovered that Ghostscript incorrectly handled parsing certain PDF files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2024-46952) It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly bypass file path validation. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-46954)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- ghostscript< 9.50~dfsg-5ubuntu4.14 | < 9.55.0~dfsg1-0ubuntu5.10 | < 10.02.1~dfsg1-0ubuntu7.4
1 vendor · 1 product