CVE & CISA-KEV Catalog

CVE-2023-36664

HIGHEPSS 87th pctl

7.8

CVSS v3

Description

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

How to fix

Remediation Available

ghostscriptDebian

Fixed in:9.53.3~dfsg-7+deb11u5CVE-2023-36664

Fixed in:10.0.0~dfsg-11+deb12u1CVE-2023-36664

Fixed in:10.01.2~dfsg-1CVE-2023-36664

Fixed in:10.01.2~dfsg-1CVE-2023-36664

ghostscriptRocky

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscriptRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

ghostscript-debuginfoRocky

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-debuginfoRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-debugsourceRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

ghostscript-debugsourceRocky

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-docRed Hat / RHEL

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-docRocky

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

ghostscript-gtk-debuginfoRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

ghostscript-gtk-debuginfoRocky

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-tools-dvipdfRocky

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-tools-dvipdfRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

ghostscript-tools-fontsRocky

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-tools-fontsRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-tools-printingRed Hat / RHEL

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-tools-printingRocky

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

ghostscript-x11Rocky

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-x11Red Hat / RHEL

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-x11-debuginfoRocky

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscript-x11-debuginfoRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

libgsRocky

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

libgsRed Hat / RHEL

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

libgs-debuginfoRocky

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

libgs-debuginfoRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

libgs-develRocky

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

libgs-develRed Hat / RHEL

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-10.el9_2RHSA-2023:5459

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

Fixed in:0:9.54.0-7.el9_0.1RHSA-2023:4324

ghostscriptUbuntu

Fixed in:9.50~dfsg-5ubuntu4.8USN-6213-1

Fixed in:9.55.0~dfsg1-0ubuntu5.3USN-6213-1

Fixed in:9.56.1~dfsg1-0ubuntu3.2USN-6213-1

Fixed in:10.0.0~dfsg1-0ubuntu1.2USN-6213-1

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredNone

User InteractionRequired

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploit Intelligence

3.24%probability of exploitation in 30 days

87thpercentile

Elevated risk: more likely to be exploited than 87% of all known CVEs.

References

Third-Party Advisory1

debian.org

Issue Tracking1

bugs.ghostscript.com

Other references5

Related Vulnerabilities

Other CWE-552 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2020-17519	High	7.5	98%	KEV	Fix
CVE-2025-11371	High	7.5	92%	KEV	Fix
CVE-2023-50164	Critical	9.8	81%	-	Fix
CVE-2016-3715	Medium	5.5	75%	KEV	Fix
CVE-2020-15175	High	7.4	71%	-	Fix
CVE-2021-39316	High	7.5	67%	-	-

Embed a live status badge for CVE-2023-36664

Markdown

[![CVE-2023-36664](https://tridentstack.com/cve/badge/CVE-2023-36664.svg)](https://tridentstack.com/cve/CVE-2023-36664)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-36664"><img src="https://tridentstack.com/cve/badge/CVE-2023-36664.svg" alt="CVE-2023-36664"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it works Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-12-05.