CVE-2024-46955
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of...
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Record
CVE-2024-46955- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Record
CVE-2024-46955- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2024-42158
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Record
EUVD-2024-42158- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w9j2-h8vr-446x
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of...
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Record
GHSA-w9j2-h8vr-446x- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2024-46955
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Record
ALPINE-CVE-2024-46955- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVBELL-CVE-2024-46955
- Record
BELL-CVE-2024-46955- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 16 moreShow less
OSV
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Record
CVE-2024-46955- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-46955
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Record
DEBIAN-CVE-2024-46955- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2024-2355
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space(CVE-2024-46951)
VUL-0: CVE-2024-46952: ghostscript: Buffer overflow in PDF XRef stream(CVE-2024-46952)
VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color space(CVE-2024-46955)
- Record
OESA-2024-2355- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-2356
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space(CVE-2024-46951)
VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color space(CVE-2024-46955)
- Record
OESA-2024-2356- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-2359
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space(CVE-2024-46951)
VUL-0: CVE-2024-46952: ghostscript: Buffer overflow in PDF XRef stream(CVE-2024-46952)
VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color space(CVE-2024-46955)
- Record
OESA-2024-2359- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-2412
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color space(CVE-2024-46955)
- Record
OESA-2024-2412- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2024-2413
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color space(CVE-2024-46955)
- Record
OESA-2024-2413- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-46955
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
- Record
UBUNTU-CVE-2024-46955- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1784042252 No score
ghostscript: Fix of 3 CVEs
- CVE-2024-46955: out-of-bounds read when reading a color in Indexed color space
- CVE-2025-59798: buffer overrun in pdf_write_cmap in the pdfwrite device
- CVE-2025-59799: stack buffer overflow in pdfmark_coerce_dest in the pdfwrite device
- Record
CLSA-2026-1784042252- Updated
- 2026-11-02
OSVCLSA-2026-1784126222 No score
ghostscript: Fix of CVE-2024-46955
- CVE-2024-46955: out-of-bounds read in Indexed colour space index (bug #707990)
- Record
CLSA-2026-1784126222- Updated
- 2026-11-02
OSVMGASA-2024-0326 No score
Updated ghostscript packages fix security vulnerabilities
Amongst other general bug fixes, this release addresses: CVE-2024-46951 CVE-2024-46952 CVE-2024-46953 CVE-2024-46954 CVE-2024-46955 CVE-2024-46956
- Record
MGASA-2024-0326- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14423-1 No score
ghostscript-10.04.0-1.1 on GA media
These are all security issues fixed in the ghostscript-10.04.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14423-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3941-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2024-46951: Fixed arbitrary code execution via unchecked 'Implementation' pointer in 'Pattern' color space (bsc#1232265).
- CVE-2024-46953: Fixed integer overflow when parsing the page format results in path truncation, path traversal, code execution (bsc#1232267).
- CVE-2024-46956: Fixed arbitrary code execution via out of bounds data access in filenameforall (bsc#1232270).
- CVE-2024-46955: Fixed out of bounds read when reading color in 'Indexed' color space (bsc#1232269).
- Record
SUSE-SU-2024:3941-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3942-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2024-46951: Fixed arbitrary code execution via unchecked 'Implementation' pointer in 'Pattern' color space (bsc#1232265).
- CVE-2024-46953: Fixed integer overflow when parsing the page format results in path truncation, path traversal, code execution (bsc#1232267).
- CVE-2024-46956: Fixed arbitrary code execution via out of bounds data access in filenameforall (bsc#1232270).
- CVE-2024-46955: Fixed out of bounds read when reading color in 'Indexed' color space (bsc#1232269).
- Record
SUSE-SU-2024:3942-1- Updated
- 2026-11-02
OSVUSN-7103-1 No score
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-46951, CVE-2024-46953, CVE-2024-46955, CVE-2024-46956)
It was discovered that Ghostscript incorrectly handled parsing certain PDF files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2024-46952)
It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly bypass file path validation. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-46954)
- Record
USN-7103-1- Updated
- 2026-11-02
OSVUSN-7138-1 No score
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-7138-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.18 |
before 10.04.0-r0 | 10.04.0-r0 |
ghostscriptAlpine:v3.19 |
before 10.04.0-r0 | 10.04.0-r0 |
ghostscriptAlpine:v3.20 |
before 10.04.0-r0 | 10.04.0-r0 |
ghostscriptAlpine:v3.21 |
before 10.04.0-r0 | 10.04.0-r0 |
ghostscriptAlpine:v3.22 |
before 10.04.0-r0 | 10.04.0-r0 |
ghostscriptAlpine:v3.23 |
before 10.04.0-r0 | 10.04.0-r0 |
ghostscriptAlpine:v3.24 |
before 10.04.0-r0 | 10.04.0-r0 |
ghostscriptAlpaquita:23 |
10.01.2-r2 up to 10.01.2-r3 | 10.01.2-r3 |
ghostscriptAlpaquita:stream |
10.03.1-r0 up to 10.04.0-r0 | 10.04.0-r0 |
ghostscriptTuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscript-docTuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
ghostscript-gtkTuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
ghostscript-tools-dvipdfTuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
ghostscript-tools-fontsTuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
ghostscript-tools-printingTuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
ghostscript-x11TuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
libgsTuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
libgs-develTuxCare:AlmaLinux:9.6 From an advisory covering 3 CVEs |
before 9.54.0-19.el9_6.tuxcare.els4 | 9.54.0-19.el9_6.tuxcare.els4 |
ghostscriptTuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
ghostscript-docTuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
ghostscript-gtkTuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
ghostscript-tools-dvipdfTuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
ghostscript-tools-fontsTuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
ghostscript-tools-printingTuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
ghostscript-x11TuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
libgsTuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
libgs-develTuxCare:AlmaLinux:9.2 |
before 9.54.0-11.el9_2.tuxcare.els13 | 9.54.0-11.el9_2.tuxcare.els13 |
ghostscriptDebian:12 |
before 10.0.0~dfsg-11+deb12u6, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u5 |
10.0.0~dfsg-11+deb12u6 |
ghostscriptDebian:13 |
before 10.04.0~dfsg-1 | 10.04.0~dfsg-1 |
ghostscriptDebian:14 |
before 10.04.0~dfsg-1 | 10.04.0~dfsg-1 |
ghostscriptDebian:11 From an advisory covering 4 CVEs |
before 9.53.3~dfsg-7+deb11u9, plus listed versions 9.53.3~dfsg-79.53.3~dfsg-7+deb11u19.53.3~dfsg-7+deb11u29.53.3~dfsg-7+deb11u39.53.3~dfsg-7+deb11u4 Show 4 moreShow less9.53.3~dfsg-7+deb11u59.53.3~dfsg-7+deb11u69.53.3~dfsg-7+deb11u79.53.3~dfsg-7+deb11u8 |
9.53.3~dfsg-7+deb11u9 |
ghostscriptDebian:12 From an advisory covering 5 CVEs |
before 10.0.0~dfsg-11+deb12u6, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u5 |
10.0.0~dfsg-11+deb12u6 |
ghostscriptMageia:9 From an advisory covering 6 CVEs |
before 10.04.0-1.mga9 | 10.04.0-1.mga9 |
ghostscriptopenEuler:22.03-LTS-SP3 From an advisory covering 3 CVEs |
before 9.55.0-16.oe2203sp3 | 9.55.0-16.oe2203sp3 |
ghostscriptopenEuler:20.03-LTS-SP4 From an advisory covering 2 CVEs |
before 9.52-20.oe2003sp4 | 9.52-20.oe2003sp4 |
ghostscriptopenEuler:22.03-LTS-SP4 From an advisory covering 3 CVEs |
before 9.55.0-17.oe2203sp4 | 9.55.0-17.oe2203sp4 |
ghostscriptopenEuler:22.03-LTS-SP1 |
before 9.55.0-16.oe2203sp1 | 9.55.0-16.oe2203sp1 |
ghostscriptopenEuler:24.03-LTS |
before 9.56.1-13.oe2403 | 9.56.1-13.oe2403 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Manager Proxy 4.3 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Manager Server 4.3 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptopenSUSE:Leap 15.5 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptopenSUSE:Leap 15.6 From an advisory covering 4 CVEs |
before 9.52-150000.200.1 | 9.52-150000.200.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 4 CVEs |
before 9.52-23.86.1 | 9.52-23.86.1 |
ghostscriptSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 4 CVEs |
before 9.52-23.86.1 | 9.52-23.86.1 |
ghostscriptUbuntu:Pro:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm8, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 29 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm7 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm8 |
ghostscriptUbuntu:Pro:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm3, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 20 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm2 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm3 |
ghostscriptUbuntu:20.04:LTS |
before 9.50~dfsg-5ubuntu4.14, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 14 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.13 |
9.50~dfsg-5ubuntu4.14 |
ghostscriptUbuntu:22.04:LTS |
before 9.55.0~dfsg1-0ubuntu5.10, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 6 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.9 |
9.55.0~dfsg1-0ubuntu5.10 |
ghostscriptUbuntu:24.04:LTS |
before 10.02.1~dfsg1-0ubuntu7.4, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 4 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.3 |
10.02.1~dfsg1-0ubuntu7.4 |
ghostscriptUbuntu:20.04:LTS From an advisory covering 6 CVEs |
before 9.50~dfsg-5ubuntu4.14, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 14 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.13 |
9.50~dfsg-5ubuntu4.14 |
ghostscriptUbuntu:22.04:LTS From an advisory covering 6 CVEs |
before 9.55.0~dfsg1-0ubuntu5.10, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 6 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.9 |
9.55.0~dfsg1-0ubuntu5.10 |
ghostscriptUbuntu:24.04:LTS From an advisory covering 6 CVEs |
before 10.02.1~dfsg1-0ubuntu7.4, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 4 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.3 |
10.02.1~dfsg1-0ubuntu7.4 |
ghostscriptUbuntu:Pro:16.04:LTS From an advisory covering 4 CVEs |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm8, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 29 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm7 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm8 |
ghostscriptUbuntu:Pro:18.04:LTS From an advisory covering 4 CVEs |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm3, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 20 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm2 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm3 |
ghostscriptopenSUSE:Tumbleweed From an advisory covering 6 CVEs |
before 10.04.0-1.1 | 10.04.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-46955 is a medium vulnerability (CVSS 5.5) in Artifex Ghostscript, published October 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 22nd percentile. Fixed in ghostscript 10.04.0-r0.
References
bugs.ghostscript.com/show_bug.cgi?id=707990
github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html
suse.com/support/update/announcement/2024/suse-su-20243942-1
cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit?id=85bd9d2f4b792fe67aef22f1a4117457461b8ba6
lists.debian.org/debian-lts-announce/2024/11/msg00023.html
nvd.nist.gov/vuln/detail/CVE-2024-46955
Show 39 moreShow less
security.alpinelinux.org/vuln/CVE-2024-46955
docs.bell-sw.com/security/cves/CVE-2024-46955
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784042252.html
security-tracker.debian.org/tracker/CVE-2024-46955
advisories.mageia.org/MGASA-2024-0326.html
bugs.mageia.org/show_bug.cgi?id=33597
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-2355
bugzilla.suse.com/1232265
ubuntu.com/security/CVE-2024-46955
cve.org/CVERecord?id=CVE-2024-46955