vulnerability

Red Hat: CVE-2023-36664: vulnerable to OS command injection due to mishandles permission validation for pipe devices (Multiple Advisories)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Jun 25, 2023
Added
Aug 1, 2023
Modified
Sep 1, 2025

Description

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

Solutions

redhat-upgrade-ghostscriptredhat-upgrade-ghostscript-debuginforedhat-upgrade-ghostscript-debugsourceredhat-upgrade-ghostscript-docredhat-upgrade-ghostscript-gtk-debuginforedhat-upgrade-ghostscript-tools-dvipdfredhat-upgrade-ghostscript-tools-fontsredhat-upgrade-ghostscript-tools-printingredhat-upgrade-ghostscript-x11redhat-upgrade-ghostscript-x11-debuginforedhat-upgrade-libgsredhat-upgrade-libgs-debuginforedhat-upgrade-libgs-devel

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today