Debian Security Bug TrackerDEBIANCVE:CVE-2023-36664

HistoryJun 25, 2023 - 10:15 p.m.

CVE-2023-36664

2023-06-2522:15:21

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

22.1%

JSON

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

OSVersionArchitecturePackageVersionFilename
Debian12allghostscript< 10.0.0~dfsg-11+deb12u1ghostscript_10.0.0~dfsg-11+deb12u1_all.deb
Debian11allghostscript< 9.53.3~dfsg-7+deb11u5ghostscript_9.53.3~dfsg-7+deb11u5_all.deb
Debian10allghostscript< 9.27~dfsg-2+deb10u5ghostscript_9.27~dfsg-2+deb10u5_all.deb
Debian999allghostscript< 10.01.2~dfsg-1ghostscript_10.01.2~dfsg-1_all.deb
Debian13allghostscript< 10.01.2~dfsg-1ghostscript_10.01.2~dfsg-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ghostscript	< 10.0.0~dfsg-11+deb12u1	ghostscript_10.0.0~dfsg-11+deb12u1_all.deb
Debian	11	all	ghostscript	< 9.53.3~dfsg-7+deb11u5	ghostscript_9.53.3~dfsg-7+deb11u5_all.deb
Debian	10	all	ghostscript	< 9.27~dfsg-2+deb10u5	ghostscript_9.27~dfsg-2+deb10u5_all.deb
Debian	999	all	ghostscript	< 10.01.2~dfsg-1	ghostscript_10.01.2~dfsg-1_all.deb
Debian	13	all	ghostscript	< 10.01.2~dfsg-1	ghostscript_10.01.2~dfsg-1_all.deb

0.001 Low

EPSS

Percentile

22.1%

JSON

Related for DEBIANCVE:CVE-2023-36664