CVE catalog

CVE-2024-29508

Ghostscript vulnerabilities

[CVE catalog]

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

Severity
Medium · CVSS 4.4CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.38% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityghostscript10.05.1~dfsg-1+deb13u3Fixed[CVE-2024-29508]
Debiantrixieghostscript10.03.0~dfsg-1FixedDistribution-reported fixed boundary[CVE-2024-29508]
Debiantrixieghostscript10.05.1~dfsg-1+deb13u1Fixed[CVE-2024-29508]
Debiansidghostscript10.03.0~dfsg-1FixedDistribution-reported fixed boundary[CVE-2024-29508]
Debiansidghostscript10.08.0~dfsg-2Fixed[CVE-2024-29508]
Debianforkyghostscript10.03.0~dfsg-1FixedDistribution-reported fixed boundary[CVE-2024-29508]
Debianforkyghostscript10.08.0~dfsg-2Fixed[CVE-2024-29508]
Debianbookworm-securityghostscript10.0.0~dfsg-11+deb12u8Fixed[CVE-2024-29508]
Debianbookwormghostscript10.0.0~dfsg-11+deb12u5FixedDistribution-reported fixed boundary[CVE-2024-29508]
Debianbookwormghostscript10.0.0~dfsg-11+deb12u8Fixed[CVE-2024-29508]

Showing 10 fix observations. All 96 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedghostscript10.0.0~dfsg-11+deb12u5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedghostscript10.02.1~dfsg1-0ubuntu7.3UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedghostscript10.02.1~dfsg1-0ubuntu7.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedghostscript-doc10.02.1~dfsg1-0ubuntu7.3UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedghostscript-doc10.02.1~dfsg1-0ubuntu7.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibgs-common10.02.1~dfsg1-0ubuntu7.3UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibgs-common10.02.1~dfsg1-0ubuntu7.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibgs-dev10.02.1~dfsg1-0ubuntu7.3UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibgs-dev10.02.1~dfsg1-0ubuntu7.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibgs1010.02.1~dfsg1-0ubuntu7.3UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibgs1010.02.1~dfsg1-0ubuntu7.7UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibgs10-common10.02.1~dfsg1-0ubuntu7.3UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibgs10-common10.02.1~dfsg1-0ubuntu7.7UnknownSource applicability is not establishedProvider not reported
Debianbookwormghostscript10.0.0~dfsg-11+deb12u5FixedDistribution-reported fixed boundary[CVE-2024-29508]
Debianbookwormghostscript10.0.0~dfsg-11+deb12u8Fixed[CVE-2024-29508]
Debianbookworm-securityghostscript10.0.0~dfsg-11+deb12u8Fixed[CVE-2024-29508]
Debianforkyghostscript10.03.0~dfsg-1FixedDistribution-reported fixed boundary[CVE-2024-29508]
Debianforkyghostscript10.08.0~dfsg-2Fixed[CVE-2024-29508]
Debiansidghostscript10.03.0~dfsg-1FixedDistribution-reported fixed boundary[CVE-2024-29508]
Debiansidghostscript10.08.0~dfsg-2Fixed[CVE-2024-29508]
Debiantrixieghostscript10.03.0~dfsg-1FixedDistribution-reported fixed boundary[CVE-2024-29508]
Debiantrixieghostscript10.05.1~dfsg-1+deb13u1Fixed[CVE-2024-29508]
Debiantrixie-securityghostscript10.05.1~dfsg-1+deb13u3Fixed[CVE-2024-29508]
Opensuseleap 15.5ghostscript9.52-150000.197.1UnknownSource applicability is not established[SUSE-SU-2024:2627-1]
Opensuseleap 15.6ghostscript9.52-150000.197.1UnknownSource applicability is not established[SUSE-SU-2024:2627-1]
Suselinux enterprise module for basesystem 15 sp5ghostscript9.52-150000.197.1UnknownSource applicability is not established[SUSE-SU-2024:2627-1]
Suselinux enterprise module for basesystem 15 sp6ghostscript9.52-150000.197.1UnknownSource applicability is not established[SUSE-SU-2024:2627-1]
Suselinux enterprise server 12 sp5ghostscript9.52-23.83.1UnknownSource applicability is not established[SUSE-SU-2024:2547-1]
Suselinux enterprise server for sap applications 12 sp5ghostscript9.52-23.83.1UnknownSource applicability is not established[SUSE-SU-2024:2547-1]
Suselinux enterprise software development kit 12 sp5ghostscript9.52-23.83.1UnknownSource applicability is not established[SUSE-SU-2024:2547-1]
Ubuntu20.04ghostscript9.27~dfsg+0-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.27~dfsg+0-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.10UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.11UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.12UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.13UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.3UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.4UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.5UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.6UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.7UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.8UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu20.04ghostscript9.50~dfsg-5ubuntu4.9UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.54.0~dfsg1-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5.1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5.2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5.3UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5.4UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5.5UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5.6UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5.7UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu22.04ghostscript9.55.0~dfsg1-0ubuntu5.9UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.01.2~dfsg1-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.01.2~dfsg1-0ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.02.1~dfsg1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.02.1~dfsg1-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.02.1~dfsg1-0ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.02.1~dfsg1-0ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.02.1~dfsg1-0ubuntu7UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.02.1~dfsg1-0ubuntu7.1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntu24.04ghostscript10.02.1~dfsg1-0ubuntu7.3UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.21~dfsg+1-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.22~dfsg+1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.22~dfsg+1-0ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.22~dfsg+1-0ubuntu1.2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.25~dfsg+1-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.25~dfsg+1-0ubuntu0.18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.10UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.11UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.12UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.13UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.14UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.15UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.16UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.17UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.18UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.18+esm1UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.18+esm2UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.18+esm3UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.18+esm4UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.3UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.4UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.5UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.6UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.7UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.8UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Ubuntuproghostscript9.26~dfsg+0-0ubuntu0.18.04.9UnknownSource applicability is not established[UBUNTU-CVE-2024-29508]
Original provider fields
{
  "package_releases": [
    {
      "name": "ghostscript",
      "status": "fixed",
      "release": "sid",
      "version": "10.08.0~dfsg-2"
    },
    {
      "name": "ghostscript",
      "status": "fixed",
      "release": "forky",
      "version": "10.08.0~dfsg-2"
    },
    {
      "name": "ghostscript",
      "status": "fixed",
      "release": "trixie",
      "version": "10.05.1~dfsg-1+deb13u1"
    },
    {
      "name": "ghostscript",
      "status": "fixed",
      "release": "trixie-security",
      "version": "10.05.1~dfsg-1+deb13u3"
    },
    {
      "name": "ghostscript",
      "status": "fixed",
      "release": "bookworm",
      "version": "10.0.0~dfsg-11+deb12u8"
    },
    {
      "name": "ghostscript",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "10.0.0~dfsg-11+deb12u8"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "ghostscript",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "10.03.0~dfsg-1"
    },
    {
      "bug": null,
      "name": "ghostscript",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "10.03.0~dfsg-1"
    },
    {
      "bug": null,
      "name": "ghostscript",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "10.03.0~dfsg-1"
    },
    {
      "bug": null,
      "name": "ghostscript",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "10.0.0~dfsg-11+deb12u5"
    }
  ],
  "distribution_packages": [
    {
      "name": "ghostscript",
      "fixed_version": "10.0.0~dfsg-11+deb12u5",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.7",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript-doc",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.7",
      "applicability_unknown": true
    },
    {
      "name": "libgs-common",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.7",
      "applicability_unknown": true
    },
    {
      "name": "libgs-dev",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.7",
      "applicability_unknown": true
    },
    {
      "name": "libgs10",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.7",
      "applicability_unknown": true
    },
    {
      "name": "libgs10-common",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.7",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.3",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript-doc",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.3",
      "applicability_unknown": true
    },
    {
      "name": "libgs-common",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.3",
      "applicability_unknown": true
    },
    {
      "name": "libgs-dev",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.3",
      "applicability_unknown": true
    },
    {
      "name": "libgs10",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.3",
      "applicability_unknown": true
    },
    {
      "name": "libgs10-common",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.3",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "9.21~dfsg+1-0ubuntu3",
        "9.22~dfsg+1-0ubuntu1",
        "9.22~dfsg+1-0ubuntu1.1",
        "9.22~dfsg+1-0ubuntu1.2",
        "9.25~dfsg+1-0ubuntu0.18.04.1",
        "9.25~dfsg+1-0ubuntu0.18.04.2",
        "9.26~dfsg+0-0ubuntu0.18.04.1",
        "9.26~dfsg+0-0ubuntu0.18.04.3",
        "9.26~dfsg+0-0ubuntu0.18.04.4",
        "9.26~dfsg+0-0ubuntu0.18.04.5",
        "9.26~dfsg+0-0ubuntu0.18.04.6",
        "9.26~dfsg+0-0ubuntu0.18.04.7",
        "9.26~dfsg+0-0ubuntu0.18.04.8",
        "9.26~dfsg+0-0ubuntu0.18.04.9",
        "9.26~dfsg+0-0ubuntu0.18.04.10",
        "9.26~dfsg+0-0ubuntu0.18.04.11",
        "9.26~dfsg+0-0ubuntu0.18.04.12",
        "9.26~dfsg+0-0ubuntu0.18.04.13",
        "9.26~dfsg+0-0ubuntu0.18.04.14",
        "9.26~dfsg+0-0ubuntu0.18.04.15",
        "9.26~dfsg+0-0ubuntu0.18.04.16",
        "9.26~dfsg+0-0ubuntu0.18.04.17",
        "9.26~dfsg+0-0ubuntu0.18.04.18",
        "9.26~dfsg+0-0ubuntu0.18.04.18+esm1",
        "9.26~dfsg+0-0ubuntu0.18.04.18+esm2",
        "9.26~dfsg+0-0ubuntu0.18.04.18+esm3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-29508",
      "fixed_version": "9.26~dfsg+0-0ubuntu0.18.04.18+esm4",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-29508",
      "provider_updated_at": "2026-04-22T14:49:38.556886Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.50~dfsg-5ubuntu4.13"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "9.27~dfsg+0-0ubuntu3",
        "9.27~dfsg+0-0ubuntu4",
        "9.50~dfsg-5ubuntu1",
        "9.50~dfsg-5ubuntu2",
        "9.50~dfsg-5ubuntu3",
        "9.50~dfsg-5ubuntu4",
        "9.50~dfsg-5ubuntu4.1",
        "9.50~dfsg-5ubuntu4.2",
        "9.50~dfsg-5ubuntu4.3",
        "9.50~dfsg-5ubuntu4.4",
        "9.50~dfsg-5ubuntu4.5",
        "9.50~dfsg-5ubuntu4.6",
        "9.50~dfsg-5ubuntu4.7",
        "9.50~dfsg-5ubuntu4.8",
        "9.50~dfsg-5ubuntu4.9",
        "9.50~dfsg-5ubuntu4.10",
        "9.50~dfsg-5ubuntu4.11",
        "9.50~dfsg-5ubuntu4.12"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-29508",
      "fixed_version": "9.50~dfsg-5ubuntu4.13",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-29508",
      "provider_updated_at": "2026-04-22T14:49:38.556886Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.55.0~dfsg1-0ubuntu5.9"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "9.54.0~dfsg1-0ubuntu2",
        "9.55.0~dfsg1-0ubuntu4",
        "9.55.0~dfsg1-0ubuntu5",
        "9.55.0~dfsg1-0ubuntu5.1",
        "9.55.0~dfsg1-0ubuntu5.2",
        "9.55.0~dfsg1-0ubuntu5.3",
        "9.55.0~dfsg1-0ubuntu5.4",
        "9.55.0~dfsg1-0ubuntu5.5",
        "9.55.0~dfsg1-0ubuntu5.6",
        "9.55.0~dfsg1-0ubuntu5.7"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-29508",
      "fixed_version": "9.55.0~dfsg1-0ubuntu5.9",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-29508",
      "provider_updated_at": "2026-04-22T14:49:38.556886Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.02.1~dfsg1-0ubuntu7.3"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "10.01.2~dfsg1-0ubuntu2",
        "10.01.2~dfsg1-0ubuntu2.1",
        "10.02.1~dfsg1-0ubuntu1",
        "10.02.1~dfsg1-0ubuntu2",
        "10.02.1~dfsg1-0ubuntu5",
        "10.02.1~dfsg1-0ubuntu6",
        "10.02.1~dfsg1-0ubuntu7",
        "10.02.1~dfsg1-0ubuntu7.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-29508",
      "fixed_version": "10.02.1~dfsg1-0ubuntu7.3",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-29508",
      "provider_updated_at": "2026-04-22T14:49:38.556886Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.52-150000.197.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:2627-1",
      "fixed_version": "9.52-150000.197.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:2627-1",
      "provider_updated_at": "2026-02-04T03:04:57.744055Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.52-150000.197.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:2627-1",
      "fixed_version": "9.52-150000.197.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:2627-1",
      "provider_updated_at": "2026-02-04T03:04:57.744055Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.52-150000.197.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:2627-1",
      "fixed_version": "9.52-150000.197.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:2627-1",
      "provider_updated_at": "2026-02-04T03:04:57.744055Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.52-150000.197.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:2627-1",
      "fixed_version": "9.52-150000.197.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:2627-1",
      "provider_updated_at": "2026-02-04T03:04:57.744055Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.52-23.83.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:2547-1",
      "fixed_version": "9.52-23.83.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:2547-1",
      "provider_updated_at": "2026-02-04T02:14:44.297972Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.52-23.83.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:2547-1",
      "fixed_version": "9.52-23.83.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:2547-1",
      "provider_updated_at": "2026-02-04T02:14:44.297972Z",
      "applicability_unknown": true
    },
    {
      "name": "ghostscript",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.52-23.83.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:2547-1",
      "fixed_version": "9.52-23.83.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:2547-1",
      "provider_updated_at": "2026-02-04T02:14:44.297972Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [ghostscript]Unknown
    Details (4)
    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

  • Source package: [ghostscript]

    Details (4)
    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

  • [ghostscript-x]Unknown

    Source package: [ghostscript]

    Details (4)
    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

  • [libgs10]Unknown

    Source package: [ghostscript]

    Details (4)
    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

  • Source package: [ghostscript]

    Details (4)
    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

  • [libgs9-common]Unknown

    Source package: [ghostscript]

    Details (4)
    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

  • [libgs-common]Unknown

    Source package: [ghostscript]

    Details (4)
    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

  • [libgs-dev]Unknown

    Source package: [ghostscript]

    Details (4)
    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security

      Fixed · Fixed: 10.0.0~dfsg-11+deb12u5

      usn · ghostscript · debian · bookworm; usn · ghostscript · debian · 12

[Debian 13 (Trixie)]

  • [ghostscript]Unknown
    Details (6)
    • 10.05.1~dfsg-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

  • Source package: [ghostscript]

    Details (6)
    • 10.05.1~dfsg-1+deb13u1 · all · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u3 · all · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

  • [libgs10]Unknown

    Source package: [ghostscript]

    Details (6)
    • 10.05.1~dfsg-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

  • Source package: [ghostscript]

    Details (6)
    • 10.05.1~dfsg-1+deb13u1 · all · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u3 · all · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

  • [libgs-common]Unknown

    Source package: [ghostscript]

    Details (6)
    • 10.05.1~dfsg-1+deb13u1 · all · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · all · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u3 · all · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

  • [libgs-dev]Unknown

    Source package: [ghostscript]

    Details (6)
    • 10.05.1~dfsg-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

    • 10.05.1~dfsg-1+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 10.03.0~dfsg-1

      usn · ghostscript · debian · 13

Observed:

References