CVE-2024-33871: Ghostscript 10.03.1 (2024-05-02) fixed 5 CVEs including CVE-2024-33871 arbitrary code execution
An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.
Other sources
The "Driver" parameter for the "opvp"/"oprp" device specifies the name of a dynamic library and allows any library to be loaded, potentially leading to arbitrary code execution.
References: https://bugs.ghostscript.com/showbug.cgi?id=707754 https://ghostscript.readthedocs.io/en/gs10.03.1/News.html
Upstream patch: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33871?
CVE-2024-33871 is considered a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2024-33871?
To fix CVE-2024-33871, upgrade to Ghostscript version 10.03.1 or later.
Which versions of Ghostscript are affected by CVE-2024-33871?
CVE-2024-33871 affects Ghostscript versions prior to 10.03.1.
What type of attack is associated with CVE-2024-33871?
CVE-2024-33871 allows for arbitrary code execution via a crafted PostScript document.
Are there any specific platforms affected by CVE-2024-33871?
Yes, both Red Hat and Debian versions of Ghostscript are affected if they are below the specified patched versions.