CVE-2024-33871

Public on 2024-05-10

Modified on 2024-06-18

Description

NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908 (ghostpdl-10.03.1)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707754

Severity

Important

CVSS v3 Base Score

7.8

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory	Status
Amazon Linux 1	ghostscript			No Fix Planned
Amazon Linux 2 - Core	ghostscript	2024-06-06	ALAS2-2024-2562	Fixed
Amazon Linux 2023	ghostscript	2024-06-06	ALAS2023-2024-637	Fixed

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD	CVSSv3	8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Red Hat: CVE-2024-33871 Mitre: CVE-2024-33871