Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ghostscript | Artifex | * | 10.01.2 (including) |
Red Hat Enterprise Linux 9 | RedHat | ghostscript-0:9.54.0-10.el9_2 | * |
Red Hat Enterprise Linux 9.0 Extended Update Support | RedHat | ghostscript-0:9.54.0-7.el9_0.1 | * |
Ghostscript | Ubuntu | bionic | * |
Ghostscript | Ubuntu | devel | * |
Ghostscript | Ubuntu | focal | * |
Ghostscript | Ubuntu | jammy | * |
Ghostscript | Ubuntu | kinetic | * |
Ghostscript | Ubuntu | lunar | * |
Ghostscript | Ubuntu | upstream | * |
Ghostscript | Ubuntu | xenial | * |