Stack-based buffer overflow in Ghostscript - CVE-2024-29506

Vulnerability identifier: #VU93813

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2024-29506

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
Ghostscript
Debian Linux
Ubuntu
openEuler
Fedora
ghostscript (Ubuntu package)
libgs9 (Ubuntu package)
ghostscript-help
ghostscript-tools-dvipdf
ghostscript-devel
ghostscript-debugsource
ghostscript-debuginfo
ghostscript
ghostscript (Debian package)
libgs10 (Ubuntu package)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the pdfi_apply_filter() function via a long PDF filter name. A remote attacker can pass a specially crafted file to the application, trigger a stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install update from vendor's website.

• https://bugs.ghostscript.com/show_bug.cgi?id=707510
• https://git.ghostscript.com/?p=ghostpdl.git%3Bh=77dc7f699beba606937b7ea23b50cf5974fa64b1
• https://www.openwall.com/lists/oss-security/2024/07/03/7