CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
- Affected products
- Alt Linux, Almalinux, Artifex Ghostscript, Linuxmint, Red Hat, Red Os, Rocky Linux, Suse
- Artifex Ghostscript
- < 10.01.2
- Fix
- Available
- CVSS 3.1
- 7.8 HIGH
- EPSS
- 3.4% (88th percentile)
- Weakness
- CWE-552
- NVD status
- Modified
- Published
- 2023-06-25
CVE-2023-36664 at NVD
9 known exploits for CVE-2023-36664
Proof-of-concept code and exploit modules indexed by Sploitus
cve-2023-34446
Scan_GhostScript
CVE-2023-36664-Ghostscript-command-injection
CVE-2023-36664
CVE-2023-36664-Ghostscript-command-injection
Exploit for Cross-site Scripting in Combodo Itop
Exploit for Files or Directories Accessible to External Parties in Artifex Ghostscript
Exploit for Files or Directories Accessible to External Parties in Artifex Ghostscript
Exploit for Files or Directories Accessible to External Parties in Artifex Ghostscript