A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Nov 27, 2019 | Nov 27, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-docUpgrade libgs-develUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-cups | Feb 22, 2021 | Nov 27, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 27, 2019 |
| Centos_linux | — | Upgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade libgs-develUpgrade libgs-debuginfoUpgrade libgs | Sep 3, 2019 | Sep 2, 2019 |
| Debian | — | Upgrade ghostscript | Sep 9, 2019 | Sep 9, 2019 |
| Freebsd | — | Upgrade ghostscript9-agpl-x11Upgrade ghostscript9-agpl-base | Dec 10, 2019 | Dec 9, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Nov 27, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.50 | Dec 6, 2019 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Jun 17, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Nov 19, 2019 | Aug 28, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Nov 19, 2019 | Aug 28, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ghostscriptUpgrade libgs | Feb 26, 2020 | Nov 27, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript-core to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 20, 2019 |
| Oracle_linux | — | Upgrade ghostscript-gtkUpgrade ghostscript-tools-fontsUpgrade ghostscript-cupsUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-x11 | Jul 21, 2020 | Aug 28, 2019 |
| Redhat_linux | — | Upgrade libgsUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-debuginfoUpgrade libgs-develUpgrade ghostscript-gtkUpgrade ghostscript-gtk-debuginfoUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-debugsourceUpgrade ghostscript-cupsUpgrade ghostscript-docUpgrade ghostscript-x11No solution exists | Sep 3, 2019 | Sep 2, 2019 |
| Suse | — | Upgrade ghostscript-mini-develUpgrade ghostscript-develUpgrade ghostscriptUpgrade ghostscript-miniUpgrade ghostscript-x11 | Sep 27, 2019 | Aug 29, 2019 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Aug 30, 2019 | Aug 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub