Lucene search

K
osvGoogleOSV:RLSA-2023:5459
HistoryOct 06, 2023 - 10:58 p.m.

Important: ghostscript security update

2023-10-0622:58:14
Google
osv.dev
3
ghostscript
security update
os command injection

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.1%

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices (CVE-2023-36664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.