Описание
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 10.03.1~dfsg1-0ubuntu3 |
| esm-infra-legacy/xenial | not-affected | code not present |
| esm-infra/bionic | not-affected | code not present |
| esm-infra/focal | not-affected | code not present |
| esm-infra/xenial | not-affected | code not present |
| focal | not-affected | code not present |
| jammy | not-affected | code not present |
| noble | released | 10.02.1~dfsg1-0ubuntu7.4 |
| oracular | released | 10.03.1~dfsg1-0ubuntu2.1 |
| upstream | released | 10.04.0~dfsg-1 |
Показывать по
EPSS
7.8 High
CVSS3
Связанные уязвимости
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Gh ...
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
Уязвимость функции decode_utf8 компонента base/gp_utf8.c набора программного обеспечения для обработки, преобразования и генерации документов Ghostscript, позволяющая нарушителю получить несанкионированный доступ к защищаемой информации
EPSS
7.8 High
CVSS3