Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-docUpgrade ghostscript-tools-dvipdf | Oct 10, 2023 | Jun 25, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 26, 2024 | Jun 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-docUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscript-debuginfoUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-gtk | May 16, 2024 | Jun 25, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-debugsourceUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtkUpgrade ghostscript-tools-printingUpgrade ghostscript-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade libgsUpgrade libgs-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade libgs-devel | Feb 17, 2025 | Jun 27, 2023 |
| Centos_linux | — | Upgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfoUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-dvipdf | Oct 6, 2023 | Jun 25, 2023 |
| Debian | — | Upgrade ghostscript | Jul 10, 2023 | Jun 25, 2023 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 18, 2023 | Jun 25, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.01.2 | Jul 7, 2023 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Jun 25, 2023 |
| Oracle_linux | — | Upgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade ghostscript-docUpgrade libgs | Oct 7, 2023 | Jun 27, 2023 |
| Redhat_linux | — | Upgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade libgs-develUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-debugsourceUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfo | Aug 1, 2023 | Jun 25, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 25, 2023 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-devel | Jul 17, 2023 | Jun 25, 2023 |
| Ubuntu | — | Upgrade ghostscript | Jul 11, 2023 | Jun 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub