{"id":"CVE-2021-3781","aliases":["ALPINE-CVE-2021-3781","BELL-CVE-2021-3781","DEBIAN-CVE-2021-3781","DSA-4972-1","EUVD-2021-27045","GHSA-gf7q-r6ff-xwg6","MGASA-2021-0436","OESA-2022-1560","SUSE-SU-2021:3044-1","SUSE-SU-2021:3180-1","UBUNTU-CVE-2021-3781","USN-5075-1","openSUSE-SU-2021:1273-1","openSUSE-SU-2021:3044-1","openSUSE-SU-2024:10783-1"],"status":"published","title":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript...","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.83913,"percentile":0.99697,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-78"],"published":"2021-09-08T01:28:24Z","modified":"2026-11-03T06:32:40Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"ghostscript","fixed_in":["9.53.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ghostscript","fixed_in":["9.54-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ghostscript","fixed_in":["9.53.3~dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ghostscript","fixed_in":["9.53.3~dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ghostscript","fixed_in":["9.53.3~dfsg-8"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"ghostscript","fixed_in":["9.53.3~dfsg-7+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"ghostscript","fixed_in":["9.53.3-2.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"ghostscript","fixed_in":["9.52-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"ghostscript","fixed_in":["9.52-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ghostscript","fixed_in":["9.52-7.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ghostscript","fixed_in":["9.52-23.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libspectre","fixed_in":["0.2.7-12.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","fixed_in":["9.50~dfsg-5ubuntu4.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","fixed_in":["9.54.0~dfsg1-0ubuntu2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"ghostscript","fixed_in":["9.52-lp152.2.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"ghostscript-mini","fixed_in":["9.52-lp152.2.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"libspectre","fixed_in":["0.2.8-lp152.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"ghostscript","fixed_in":["9.52-155.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libspectre","fixed_in":["0.2.8-3.12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.53.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.53.3~dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.53.3~dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.53.3~dfsg-8"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.53.3~dfsg-7+deb11u1"}]}],"versions":["9.53.3~dfsg-7"]},{"source":"osv","ecosystem":"Mageia:8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.53.3-2.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-7.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-12.12.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.3"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0~dfsg1-0ubuntu2"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.3"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-lp152.2.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ghostscript-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-lp152.2.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-lp152.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-155.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libspectre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-3.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-2.2"}]}],"bundled":44}],"products":[{"vendor":"artifex","product":"ghostscript"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002271","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://ghostscript.com/CVE-2021-3781.html","tags":["x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202211-11","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3781","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gf7q-r6ff-xwg6"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3781","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3781","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3781","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0436.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29453","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5075-1","tags":["advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4972","tags":["web"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=704342","tags":["report"]},{"url":"https://therecord.media/ghostscript-zero-day-allows-full-server-compromises","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M64NXCVRRUDYD4U65CYH2ROCOGMSYF3U/","tags":["web","advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1560","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213044-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1184123","tags":["report"]},{"url":"https://bugzilla.suse.com/1190381","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3781","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213180-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3781","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3781","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H36LVLBVTFLQTYOKRPFVWGCDCWJQWKLY/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15900","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-3781","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2022-02-16T00:00:00Z","modified":"2024-08-03T17:09:08.668Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-27045","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2022-02-16T00:00:00Z","modified":"2024-08-03T17:09:08Z","updated_at":"2026-11-03T03:25:11.953192Z"}],"ghsa":[{"id":"GHSA-gf7q-r6ff-xwg6","title":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript...","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2022-02-17T00:00:27Z","modified":"2023-07-04T05:01:26Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20","CWE-78"],"updated_at":"2026-11-02T14:54:40.485503Z"}],"nvd":[{"id":"CVE-2021-3781","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2022-02-16T19:15:08.817Z","modified":"2026-06-17T04:05:45.05Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20","CWE-78"],"updated_at":"2026-11-02T14:07:04.6896Z"}],"osv":[{"id":"ALPINE-CVE-2021-3781","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2022-02-16T19:15:08.817Z","modified":"2026-11-03T06:32:40.920740861Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"BELL-CVE-2021-3781","title":"CVE-2021-3781 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:44.159092Z","modified":"2026-01-26T09:46:21.909251Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3781","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2022-02-16T19:15:08.817Z","modified":"2026-04-16T04:31:59.378293906Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-3781","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2022-02-16T19:15:08.817Z","modified":"2026-10-23T18:03:38.280038467Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2022-1560","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\r\n\r\nA trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2021-3781)","status":"published","published":"2022-03-07T11:04:50Z","modified":"2026-08-18T01:16:27.10960676Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2021-3781","description":"A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2021-09-08T01:28:24Z","modified":"2026-04-22T12:57:54.890647Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"DSA-4972-1","title":"ghostscript - security update","status":"published","published":"2021-09-10T00:00:00Z","modified":"2026-03-09T02:11:24.684325Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0436","title":"Updated ghostscript packages fix security vulnerability","description":"Trivial -dSAFER bypass in 9.55. (CVE-2021-3781)\n","status":"published","published":"2021-09-23T04:49:29Z","modified":"2026-04-16T04:44:32.155891538Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1273-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)\n\nAlso a hardening fix was added:\n\n- Link as position independent executable (bsc#1184123)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-09-16T08:03:53Z","modified":"2026-02-04T04:12:17.231343Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3044-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)\n\nAlso a hardening fix was added:\n\n- Link as position independent executable (bsc#1184123)\n","status":"published","published":"2021-09-15T08:17:48Z","modified":"2026-02-04T03:32:45.131039Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10783-1","title":"ghostscript-9.54.0-2.2 on GA media","description":"These are all security issues fixed in the ghostscript-9.54.0-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:38:19.404781Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:3044-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)\n\nAlso a hardening fix was added:\n\n- Link as position independent executable (bsc#1184123)\n","status":"published","published":"2021-09-15T08:18:20Z","modified":"2025-05-02T04:10:49.810116Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3180-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)\n","status":"published","published":"2021-09-21T14:30:47Z","modified":"2026-02-04T03:25:08.881553Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-5075-1","title":"ghostscript vulnerability","description":"It was discovered that Ghostscript incorrectly handled certain PostScript\nfiles. If a user or automated system were tricked into processing a\nspecially crafted file, a remote attacker could possibly use this issue to\naccess arbitrary files, execute arbitrary code, or cause a denial of\nservice.\n","status":"published","published":"2021-09-10T11:57:42Z","modified":"2026-04-22T10:17:32.904164Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}