CVE-2023-36664

—

CVSS 3.1

7.8 high

EPSS

4%p91

Published

Jun 25, 2023 (Jun 25, 2023)

Modified

Aug 28, 2026

Description

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

Vendors: artifex debian fedoraproject
Products: ghostscript, debian linux, fedora
Weakness: CWE-552
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news1 stories

Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2023Vulnerability in the wildCVE-2023-31184 CVE-2023-31185 CVE-2023-36664+2 CVEs

60