Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-x11Upgrade ghostscript-doc | Oct 10, 2023 | Jun 25, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 26, 2024 | Jun 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-docUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-debuginfoUpgrade libgs-devel | May 16, 2024 | Jun 25, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-gtkUpgrade ghostscript-tools-printingUpgrade libgs-develUpgrade ghostscript-gtk-debuginfoUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-docUpgrade libgs-debuginfoUpgrade ghostscript-x11Upgrade ghostscript | Feb 17, 2025 | Jun 27, 2023 |
| Centos_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-debugsourceUpgrade libgsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-debuginfoUpgrade ghostscript-docUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-printingUpgrade libgs-debuginfoUpgrade ghostscript | Oct 6, 2023 | Jun 25, 2023 |
| Debian | — | Upgrade ghostscript | Jul 10, 2023 | Jun 25, 2023 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 18, 2023 | Jun 25, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.01.2 | Jul 7, 2023 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 10, 2024 | Jun 25, 2023 |
| Oracle_linux | — | Upgrade libgsUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-tools-printing | Oct 7, 2023 | Jun 27, 2023 |
| Redhat_linux | — | Upgrade ghostscript-debugsourceUpgrade ghostscript-tools-printingUpgrade ghostscript-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-docUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgs-devel | Aug 1, 2023 | Jun 25, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 25, 2023 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-develUpgrade ghostscript | Jul 17, 2023 | Jun 25, 2023 |
| Ubuntu | — | Upgrade ghostscript | Jul 11, 2023 | Jun 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub