Описание
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
A vulnerability was found in Ghostscript. This flaw occurs due to a mishandled permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
Отчет
Versions of Ghostscript shipped with Red Hat Enterprise Linux 7 and 8 are not affected as it will forbid file execution with ".invalidfileaccess" if -dSAFER is used.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | ghostscript | Out of support scope | ||
| Red Hat Enterprise Linux 7 | ghostscript | Not affected | ||
| Red Hat Enterprise Linux 8 | ghostscript | Not affected | ||
| Red Hat Enterprise Linux 9 | ghostscript | Fixed | RHSA-2023:5459 | 05.10.2023 |
| Red Hat Enterprise Linux 9.0 Extended Update Support | ghostscript | Fixed | RHSA-2023:4324 | 31.07.2023 |
Показывать по
Дополнительная информация
Статус:
8.4 High
CVSS3
Связанные уязвимости
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
Artifex Ghostscript through 10.01.2 mishandles permission validation f ...
8.4 High
CVSS3