Summary
It was discovered that Ghostscript incorrectly handled pipe devices. If a
user or automated system were tricked into opening a specially crafted PDF
file, a remote attacker could use this issue to execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | ghostscript | 9.50~dfsg-5ubuntu4.8 |
| Ubuntu · 22.04 LTS 22.04:LTS | ghostscript | 9.55.0~dfsg1-0ubuntu5.3 |
Vulnerabilities 1
-
Unscored —CVE-2023-36664 Public exploit
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | p…
References
-
report
https://ubuntu.com/security/CVE-2023-36664