Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-docUpgrade libgs-develUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-x11 | Oct 10, 2023 | Jun 25, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 26, 2024 | Jun 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscriptUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade libgs-develUpgrade ghostscript-docUpgrade libgsUpgrade ghostscript-cups | May 16, 2024 | Jun 25, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-x11Upgrade ghostscript-gtk-debuginfoUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-docUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade libgsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtkUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printing | Feb 17, 2025 | Jun 27, 2023 |
| Centos_linux | — | Upgrade ghostscript-tools-printingUpgrade ghostscript-gtk-debuginfoUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-debugsource | Oct 6, 2023 | Jun 25, 2023 |
| Debian | — | Upgrade ghostscript | Jul 10, 2023 | Jun 25, 2023 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 18, 2023 | Jun 25, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.01.2 | Jul 7, 2023 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Jun 25, 2023 |
| Oracle_linux | — | Upgrade libgs-develUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-doc | Oct 7, 2023 | Jun 27, 2023 |
| Redhat_linux | — | Upgrade ghostscript-debugsourceUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade libgs-debuginfoUpgrade ghostscript-docUpgrade ghostscript-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscriptUpgrade libgs-devel | Aug 1, 2023 | Jun 25, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 25, 2023 |
| Suse | — | Upgrade ghostscript-develUpgrade ghostscript-x11Upgrade ghostscript | Jul 17, 2023 | Jun 25, 2023 |
| Ubuntu | — | Upgrade ghostscript | Jul 11, 2023 | Jun 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub