Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libgs-develUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-x11Upgrade ghostscript-docUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fonts | Oct 10, 2023 | Jun 25, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 26, 2024 | Jun 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-docUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade libgs-develUpgrade ghostscript | May 16, 2024 | Jun 25, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-docUpgrade libgsUpgrade libgs-debuginfoUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-gtkUpgrade ghostscript-tools-fonts | Feb 17, 2025 | Jun 27, 2023 |
| Centos_linux | — | Upgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgs-debuginfoUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade ghostscript-tools-fonts | Oct 6, 2023 | Jun 25, 2023 |
| Debian | — | Upgrade ghostscript | Jul 10, 2023 | Jun 25, 2023 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 18, 2023 | Jun 25, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.01.2 | Jul 7, 2023 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Jun 25, 2023 |
| Oracle_linux | — | Upgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-tools-printing | Oct 7, 2023 | Jun 27, 2023 |
| Redhat_linux | — | Upgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade ghostscript | Aug 1, 2023 | Jun 25, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 25, 2023 |
| Suse | — | Upgrade ghostscript-develUpgrade ghostscript-x11Upgrade ghostscript | Jul 17, 2023 | Jun 25, 2023 |
| Ubuntu | — | Upgrade ghostscript | Jul 11, 2023 | Jun 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub