CVE-2024-29510

2024-07-0319:15:03

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-29510

reserved

security problem

unix

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

OSVersionArchitecturePackageVersionFilename
Debian12allghostscript< 10.0.0~dfsg-11+deb12u4ghostscript_10.0.0~dfsg-11+deb12u4_all.deb
Debian11allghostscript< 9.53.3~dfsg-7+deb11u7ghostscript_9.53.3~dfsg-7+deb11u7_all.deb
Debian999allghostscript< 10.03.1~dfsg~git20240518-1ghostscript_10.03.1~dfsg~git20240518-1_all.deb
Debian13allghostscript< 10.03.1~dfsg~git20240518-1ghostscript_10.03.1~dfsg~git20240518-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ghostscript	< 10.0.0~dfsg-11+deb12u4	ghostscript_10.0.0~dfsg-11+deb12u4_all.deb
Debian	11	all	ghostscript	< 9.53.3~dfsg-7+deb11u7	ghostscript_9.53.3~dfsg-7+deb11u7_all.deb
Debian	999	all	ghostscript	< 10.03.1~dfsg~git20240518-1	ghostscript_10.03.1~dfsg~git20240518-1_all.deb
Debian	13	all	ghostscript	< 10.03.1~dfsg~git20240518-1	ghostscript_10.03.1~dfsg~git20240518-1_all.deb