CVE-2024-29510
Published: May 10, 2024Last modified: August 19, 2024
Description
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 6.3 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | NONE |
| User interaction | REQUIRED |
| Scope | CHANGED |
| Confidentiality | HIGH |
| Integrity impact | NONE |
| Availability impact | NONE |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | ghostscript | Fixed (10.01.2-r2) |
| Stream | ghostscript | Fixed (10.03.1-r0) |