Fluid Attacks Database

Description

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
alpine v3.15	ghostscript	=8.64-r0 \|\| =8.70-r0 \|\| =8.71-r0 \|\| =8.71-r1 \|\| =8.71-r2 \|\| =8.71-r3 \|\| =8.71-r4 \|\| =9.00-r0 \|\| =9.00-r1 \|\| =9.00-r2 \|\| =9.04-r0 \|\| =9.05-r0 \|\| =9.05-r1 \|\| =9.06-r0 \|\| =9.06-r1 \|\| =9.06-r2 \|\| =9.06-r3 \|\| =9.07-r0 \|\| =9.09-r0 \|\| =9.09-r1 \|\| =9.10-r0 \|\| =9.10-r1 \|\| =9.15-r0 \|\| =9.15-r1 \|\| =9.16-r0 \|\| =9.16-r1 \|\| =9.16-r2 \|\| =9.18-r0 \|\| =9.19-r0 \|\| =9.19-r1 \|\| =9.20-r0 \|\| =9.20-r1 \|\| =9.21-r0 \|\| =9.21-r1 \|\| =9.21-r2 \|\| =9.21-r3 \|\| =9.22-r0 \|\| =9.24-r0 \|\| =9.25-r0 \|\| =9.25-r1 \|\| =9.26-r0 \|\| =9.26-r1 \|\| =9.26-r2 \|\| =9.27-r0 \|\| =9.27-r1 \|\| =9.27-r2 \|\| =9.27-r3 \|\| =9.27-r4 \|\| =9.50-r0 \|\| =9.51-r0 \|\| =9.52-r0 \|\| =9.53.1-r0 \|\| =9.53.2-r0 \|\| =9.53.3-r0 \|\| =9.54.0-r0 \|\| =9.54.0-r1 \|\| =9.55.0-r0 \|\| =9.55.0-r1 \|\| >=0 <9.55.0-r2	9.55.0-r2
alpine v3.16	ghostscript	=8.64-r0 \|\| =8.70-r0 \|\| =8.71-r0 \|\| =8.71-r1 \|\| =8.71-r2 \|\| =8.71-r3 \|\| =8.71-r4 \|\| =9.00-r0 \|\| =9.00-r1 \|\| =9.00-r2 \|\| =9.04-r0 \|\| =9.05-r0 \|\| =9.05-r1 \|\| =9.06-r0 \|\| =9.06-r1 \|\| =9.06-r2 \|\| =9.06-r3 \|\| =9.07-r0 \|\| =9.09-r0 \|\| =9.09-r1 \|\| =9.10-r0 \|\| =9.10-r1 \|\| =9.15-r0 \|\| =9.15-r1 \|\| =9.16-r0 \|\| =9.16-r1 \|\| =9.16-r2 \|\| =9.18-r0 \|\| =9.19-r0 \|\| =9.19-r1 \|\| =9.20-r0 \|\| =9.20-r1 \|\| =9.21-r0 \|\| =9.21-r1 \|\| =9.21-r2 \|\| =9.21-r3 \|\| =9.22-r0 \|\| =9.24-r0 \|\| =9.25-r0 \|\| =9.25-r1 \|\| =9.26-r0 \|\| =9.26-r1 \|\| =9.26-r2 \|\| =9.27-r0 \|\| =9.27-r1 \|\| =9.27-r2 \|\| =9.27-r3 \|\| =9.27-r4 \|\| =9.50-r0 \|\| =9.51-r0 \|\| =9.52-r0 \|\| =9.53.1-r0 \|\| =9.53.2-r0 \|\| =9.53.3-r0 \|\| =9.54.0-r0 \|\| =9.54.0-r1 \|\| =9.55.0-r0 \|\| =9.56.1-r0 \|\| =9.56.1-r1 \|\| >=0 <9.56.1-r2	9.56.1-r2
debian 11	ghostscript	=9.53.3~dfsg-7 \|\| =9.53.3~dfsg-7+deb11u1 \|\| =9.53.3~dfsg-7+deb11u2 \|\| =9.53.3~dfsg-7+deb11u3 \|\| =9.53.3~dfsg-7+deb11u4 \|\| >=0 <9.53.3~dfsg-7+deb11u5	9.53.3~dfsg-7+deb11u5
debian 12	ghostscript	=10.0.0~dfsg-11 \|\| >=0 <10.0.0~dfsg-11+deb12u1	10.0.0~dfsg-11+deb12u1
debian 13	ghostscript	>=0 <10.01.2~dfsg-1	10.01.2~dfsg-1
debian 14	ghostscript	>=0 <10.01.2~dfsg-1	10.01.2~dfsg-1
rpm rhel9.0	ghostscript	<0:9.54.0-7.el9_0.1	0:9.54.0-7.el9_0.1
rpm rhel6	ghostscript	-	-
rpm rhel9	ghostscript	<0:9.54.0-10.el9_2	0:9.54.0-10.el9_2

Aliases

1. CVE-2023-366642. NVD-2023-366643. OSV-ALPINE-2023-366644. OSV-2023-366645. OSV-DEBIAN-2023-366646. SECURITY-CVE-2023-366647. SECURITY-TRACKER-CVE-2023-36664

References

1. https://github.com/jakabakos/CVE-2023-36664-Ghostscript-command-injection

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.