Remote Code Execution (RCE)

🗓️ 11 Sep 2021 11:12:35Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

ghostscript vulnerability Remote Code Executio

Reporter	Title	Published	Views	Family All 76
AlpineLinux	CVE-2021-3781	16 Feb 202200:00	–	alpinelinux
ArchLinux	[ASA-202109-3] ghostscript: arbitrary command execution	14 Sep 202100:00	–	archlinux
Information Security Automation	Security News: Microsoft Patch Tuesday September 2021, OMIGOD, MSHTML RCE, Confluence RCE, Ghostscript RCE, FORCEDENTRY Pegasus	18 Sep 202123:22	–	avleonov
BDU FSTEC	The vulnerability of the software for processing, transforming, and generating documents using Ghostscript arises from the improper neutralization of special elements used in operating system commands. This allows an attacker to execute arbitrary code.	31 Jul 202400:00	–	bdu_fstec
Tenable Nessus	CentOS 9 : ghostscript-9.54.0-4.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian DSA-4972-1 : ghostscript - security update	10 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2022-1787)	6 Jun 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2022-1804)	6 Jun 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : ghostscript (EulerOS-SA-2022-1839)	15 Jun 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : ghostscript (EulerOS-SA-2022-1863)	15 Jun 202200:00	–	nessus

Vulners

Node

ghostscript ghostscriptMatch9.52-r0os

AND

ghostscript ghostscriptMatch9.53.3-r0os

AND

ghostscript ghostscriptMatch9.51-r0os

AND

ghostscript ghostscriptMatch9.54.0-r0os

AND

ghostscript ghostscriptMatch9.50-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

hirsute hirsuteMatch9.52~dfsg-1ubuntu2debian

AND

hirsute hirsuteMatch9.53.3~dfsg-5debian

AND

debian debian_linux

OR

focal focalMatch9.50~dfsg-5ubuntu4.2debian

AND

focal focalMatch9.50~dfsg-5ubuntu4debian

AND

debian debian_linux

OR

ghostscript ghostscriptMatch9.53.3~dfsg-5debian

AND

debian debian_linuxMatch999

OR

ghostscript ghostscriptMatch9.52.1~dfsg-1debian

AND

debian debian_linuxMatch11

OR

ghostscript ghostscriptMatch9.53.3-r0os

AND

alpinelinux alpine_linuxMatch3.13

OR

ghostscript ghostscriptMatch9.54.0-r0os

AND

alpinelinux alpine_linuxMatch3.14

OR

devel develMatch9.53.3~dfsg-7debian

AND

devel develMatch9.52~dfsg-1ubuntu2debian

AND

devel develMatch9.53.3~dfsg-5debian

AND

debian debian_linux

Source	Link
secdb	www.secdb.alpinelinux.org/edge/main.yaml
security	www.security.gentoo.org/glsa/202211-11
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
ghostscript	www.ghostscript.com/CVE-2021-3781.html

26 Jun 2023 20:49Current

3.6Low risk

Vulners AI Score3.6

CVSS 29.3

CVSS 3.19.9

EPSS0.83913

ghostscript vulnerability remote code execution software interpreter