Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade libgsUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11 | Oct 10, 2023 | Jun 25, 2023 |
| Alpine Linux | — | Upgrade ghostscript | Mar 26, 2024 | Jun 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libgs-develUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-debuginfoUpgrade ghostscript-docUpgrade ghostscript-cupsUpgrade libgs | May 16, 2024 | Jun 25, 2023 |
| Amazon_linux_2023 | — | Upgrade ghostscript-gtk-debuginfoUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-docUpgrade libgs-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-printing | Feb 17, 2025 | Jun 27, 2023 |
| Centos_linux | — | Upgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printingUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-debuginfo | Oct 6, 2023 | Jun 25, 2023 |
| Debian | — | Upgrade ghostscript | Jul 10, 2023 | Jun 25, 2023 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Sep 18, 2023 | Jun 25, 2023 |
| Ghostscript | — | Upgrade to Ghostscript version 10.01.2 | Jul 7, 2023 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Jun 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 10, 2024 | Jun 25, 2023 |
| Oracle_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade libgs-develUpgrade ghostscript | Oct 7, 2023 | Jun 27, 2023 |
| Redhat_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade libgs-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-printing | Aug 1, 2023 | Jun 25, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 25, 2023 |
| Suse | — | Upgrade ghostscript-develUpgrade ghostscript-x11Upgrade ghostscript | Jul 17, 2023 | Jun 25, 2023 |
| Ubuntu | — | Upgrade ghostscript | Jul 11, 2023 | Jun 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub