Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-36664

Fixed in a distro release EPSS 4%

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

Published 2023-06-25 · CVE record · OSV

Products: artifex ghostscript, debian_linux, fedoraproject fedora

Distro releases

ReleasePackageFixed in
AlmaLinux 9ghostscript9.54.0-10.el9_2
AlmaLinux 9ghostscript-doc9.54.0-10.el9_2
AlmaLinux 9ghostscript-tools-dvipdf9.54.0-10.el9_2
AlmaLinux 9ghostscript-tools-fonts9.54.0-10.el9_2
AlmaLinux 9ghostscript-tools-printing9.54.0-10.el9_2
AlmaLinux 9ghostscript-x119.54.0-10.el9_2
AlmaLinux 9libgs9.54.0-10.el9_2
AlmaLinux 9libgs-devel9.54.0-10.el9_2
Alpine 3.15ghostscript9.55.0-r2
Alpine 3.16ghostscript9.56.1-r2
Amazon Linux 2ghostscript9.54.0-9.amzn2.0.1
Amazon Linux 2ghostscript-cups9.54.0-9.amzn2.0.1
Amazon Linux 2ghostscript-doc9.54.0-9.amzn2.0.1
Amazon Linux 2ghostscript-gtk9.54.0-9.amzn2.0.1
Amazon Linux 2libgs9.54.0-9.amzn2.0.1
Amazon Linux 2libgs-devel9.54.0-9.amzn2.0.1
Amazon Linux 2023ghostscript9.56.1-7.amzn2023.0.2
Amazon Linux 2023ghostscript-doc9.56.1-7.amzn2023.0.2
Amazon Linux 2023ghostscript-gtk9.56.1-7.amzn2023.0.2
Amazon Linux 2023ghostscript-tools-dvipdf9.56.1-7.amzn2023.0.2
Amazon Linux 2023ghostscript-tools-fonts9.56.1-7.amzn2023.0.2
Amazon Linux 2023ghostscript-tools-printing9.56.1-7.amzn2023.0.2
Amazon Linux 2023ghostscript-x119.56.1-7.amzn2023.0.2
Amazon Linux 2023libgs9.56.1-7.amzn2023.0.2
Amazon Linux 2023libgs-devel9.56.1-7.amzn2023.0.2
Chainguardghostscript0
Debian 11ghostscript9.53.3~dfsg-7+deb11u5
Debian 12ghostscript10.0.0~dfsg-11+deb12u1
Debian 13ghostscript10.01.2~dfsg-1
Debian 14ghostscript10.01.2~dfsg-1
Red Hat Enterprise Linux 9ghostscript0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-debuginfo0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-debugsource0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-doc0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-gtk-debuginfo0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-tools-dvipdf0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-tools-fonts0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-tools-printing0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-x110:9.54.0-10.el9_2
Red Hat Enterprise Linux 9ghostscript-x11-debuginfo0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9libgs0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9libgs-debuginfo0:9.54.0-10.el9_2
Red Hat Enterprise Linux 9libgs-devel0:9.54.0-10.el9_2
Red Hat rhel eus 9.0ghostscript0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-debuginfo0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-debugsource0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-doc0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-gtk-debuginfo0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-tools-dvipdf0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-tools-fonts0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-tools-printing0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-x110:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0ghostscript-x11-debuginfo0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0libgs0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0libgs-debuginfo0:9.54.0-7.el9_0.1
Red Hat rhel eus 9.0libgs-devel0:9.54.0-7.el9_0.1
Rocky Linux 9ghostscript0:9.54.0-10.el9_2
SUSE Enterprise Storage 7ghostscript9.52-150000.167.1
SUSE Enterprise Storage 7.1ghostscript9.52-150000.167.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSghostscript9.52-150000.167.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSghostscript9.52-150000.167.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSghostscript9.52-150000.167.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSghostscript9.52-150000.167.1
SUSE Linux Enterprise Module for Basesystem 15 SP4ghostscript9.52-150000.167.1
SUSE Linux Enterprise Module for Basesystem 15 SP5ghostscript9.52-150000.167.1
SUSE Linux Enterprise Real Time 15 SP3ghostscript9.52-150000.167.1
SUSE Linux Enterprise Server 12 SP2-BCLghostscript9.52-23.54.1
SUSE Linux Enterprise Server 12 SP4-ESPOSghostscript9.52-23.54.1
SUSE Linux Enterprise Server 12 SP4-LTSSghostscript9.52-23.54.1
SUSE Linux Enterprise Server 12 SP5ghostscript9.52-23.54.1
SUSE Linux Enterprise Server 15 SP1-LTSSghostscript9.52-150000.167.1
SUSE Linux Enterprise Server 15 SP2-LTSSghostscript9.52-150000.167.1
SUSE Linux Enterprise Server 15 SP3-LTSSghostscript9.52-150000.167.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4ghostscript9.52-23.54.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5ghostscript9.52-23.54.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1ghostscript9.52-150000.167.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2ghostscript9.52-150000.167.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3ghostscript9.52-150000.167.1
SUSE Linux Enterprise Software Development Kit 12 SP5ghostscript9.52-23.54.1
SUSE Manager Proxy 4.2ghostscript9.52-150000.167.1
SUSE Manager Server 4.2ghostscript9.52-150000.167.1
SUSE OpenStack Cloud 9ghostscript9.52-23.54.1
SUSE OpenStack Cloud Crowbar 9ghostscript9.52-23.54.1
Ubuntu 20.04 LTSghostscript9.50~dfsg-5ubuntu4.8
Ubuntu 22.04 LTSghostscript9.55.0~dfsg1-0ubuntu5.3
Wolfighostscript0
openSUSE Leap 15.4ghostscript9.52-150000.167.1
openSUSE Leap 15.5ghostscript9.52-150000.167.1
openSUSE Tumbleweedghostscript9.56.1-4.1