Advisory ROSA-SA-2023-2318

software: ghostscript 9.54.0
OS: ROSA-CHROME

package_evr_string: ghostscript-9.54.0-9.src.rpm

CVE-ID: CVE-2023-36664
BDU-ID: 2023-03466
CVE-Crit: HIGH
CVE-DESC.: A vulnerability exists in the Ghostscript document processing, conversion, and generation software suite due to failure to take measures to neutralize special elements used in the operating system command. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by using the %pipe% prefix or the | special character
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update ghostscript