CVE Vulnerabilities

CVE-2023-36664

Published: Jun 25, 2023 | Modified: Nov 07, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
8.4 IMPORTANT
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Ubuntu
MEDIUM

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

Affected Software

Name Vendor Start Version End Version
Ghostscript Artifex * 10.01.2 (including)
Red Hat Enterprise Linux 9 RedHat ghostscript-0:9.54.0-10.el9_2 *
Red Hat Enterprise Linux 9.0 Extended Update Support RedHat ghostscript-0:9.54.0-7.el9_0.1 *
Ghostscript Ubuntu bionic *
Ghostscript Ubuntu devel *
Ghostscript Ubuntu focal *
Ghostscript Ubuntu jammy *
Ghostscript Ubuntu kinetic *
Ghostscript Ubuntu lunar *
Ghostscript Ubuntu upstream *
Ghostscript Ubuntu xenial *

References