In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Sep 21, 2018 | Aug 27, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-cupsUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-devel | Apr 27, 2020 | Aug 27, 2018 |
| Centos_linux | — | Upgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-doc | Dec 15, 2018 | Aug 27, 2018 |
| Debian | — | Upgrade ghostscript | Sep 9, 2018 | Aug 27, 2018 |
| Freebsd | — | Upgrade ghostscript9-agpl-x11Upgrade ghostscript9-agpl-base | Sep 5, 2018 | Sep 4, 2018 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Nov 26, 2018 | Aug 27, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.24 | Oct 10, 2018 | Aug 27, 2018 |
| Oracle_linux | — | Upgrade ghostscript-develUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-doc | Jul 21, 2020 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade ghostscript-develNo solution existsUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade ghostscript-gtk | Nov 28, 2018 | Aug 27, 2018 |
| Suse | — | Upgrade ghostscript-miniUpgrade ghostscript-mini-develUpgrade ghostscript-develUpgrade libspectre-develUpgrade ghostscriptUpgrade libspectre1Upgrade ghostscript-x11 | Oct 3, 2018 | Aug 27, 2018 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Oct 2, 2018 | Aug 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub