REDHAT-BUG-2217798: High severity ghostscript vulnerability
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
References https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=0974e4f2ac0005d3731e0b5c13ebc7e965540f4d https://bugs.ghostscript.com/showbug.cgi?id=706761 https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=505eab7782b429017eb434b2b95120855f2b0e3c
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2217798?
The severity of REDHAT-BUG-2217798 is considered high due to improper permission validation.
How do I fix REDHAT-BUG-2217798?
To fix REDHAT-BUG-2217798, upgrade to Ghostscript version 10.01.3 or later.
Which versions of Ghostscript are affected by REDHAT-BUG-2217798?
Ghostscript versions up to and including 10.01.2 are affected by REDHAT-BUG-2217798.
What type of vulnerability is REDHAT-BUG-2217798?
REDHAT-BUG-2217798 is a permission validation vulnerability associated with pipe devices.
Who is impacted by REDHAT-BUG-2217798?
Users and administrators running affected versions of Ghostscript may be impacted by REDHAT-BUG-2217798.