A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 9.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ghostscript | Mar 26, 2024 | Feb 16, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 16, 2022 | |
| Debian | debian-upgrade-ghostscript | Nov 4, 2022 | Feb 16, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-app-text-ghostscript-gpl | Nov 23, 2022 | Feb 16, 2022 | |
| Ghostscript | ghostscript-upgrade-9_55 | Mar 22, 2022 | Feb 16, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-ghostscripthuawei-euleros-2_0_sp10-upgrade-ghostscript-help | Jun 7, 2022 | Feb 16, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-ghostscripthuawei-euleros-2_0_sp9-upgrade-ghostscript-help | Jun 16, 2022 | Feb 16, 2022 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-desktop-pdf-viewer-gsx-9-54-0-11-4-38-0-1-101-3oracle-solaris-11-4-upgrade-image-ghostscript-9-54-0-11-4-38-0-1-101-3 | Nov 17, 2021 | Nov 17, 2021 | |
| Suse | — | suse-upgrade-ghostscriptsuse-upgrade-ghostscript-develsuse-upgrade-ghostscript-minisuse-upgrade-ghostscript-mini-develsuse-upgrade-ghostscript-x11suse-upgrade-libspectre-develsuse-upgrade-libspectre1 | Sep 16, 2021 | Sep 10, 2021 |
| Ubuntu | ubuntu-upgrade-ghostscriptubuntu-upgrade-libgs9 | Sep 11, 2021 | Sep 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub