VDB
DEBIAN-CVE-2024-29511
DEBIAN-CVE-2024-29511
PUBLISHED
CVSS 7.5 HIGH
Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLanguage. For example, exploitation can use debug_file /tmp/out and user_patterns_file /etc/passwd.
Risk Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | ghostscript | 0, 0 |
| Debian:12 | ghostscript | 0, 10.0.0~dfsg-11, 10.0.0~dfsg-11+deb12u1 |
| Debian:11 | ghostscript | 10.0.0, 10.0.0, 10.0.0 |
| Debian:14 | ghostscript | 0, 0 |
Timeline
- Jul 3, 2024 CVE Published
- Apr 28, 2026 CVE Updated