VDB
DEBIAN-CVE-2024-33869
DEBIAN-CVE-2024-33869
PUBLISHED
CVSS 5.300000190734863 MEDIUM
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | ghostscript | 9.53.3, *, 9.53.3 |
| Debian:14 | ghostscript | 0, 0 |
| Debian:12 | ghostscript | 10.0.0, 10.0.0, 10.0.0 |
| Debian:13 | ghostscript | 0, 0 |
Timeline
- Jul 3, 2024 CVE Published
- Apr 28, 2026 CVE Updated