A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Nov 8, 2019 | Sep 3, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade libgs | Feb 22, 2021 | Sep 3, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 3, 2019 |
| Centos_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-debugsourceUpgrade ghostscript-cupsUpgrade libgs-debuginfoUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscriptUpgrade ghostscript-x11-debuginfoUpgrade libgsUpgrade libgs-devel | Sep 3, 2019 | Sep 2, 2019 |
| Debian | — | Upgrade ghostscript | Sep 9, 2019 | Sep 3, 2019 |
| Freebsd | — | Upgrade ghostscript9-agpl-x11Upgrade ghostscript9-agpl-base | Dec 10, 2019 | Dec 9, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Sep 3, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.50 | Sep 11, 2019 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Jun 17, 2020 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Nov 19, 2019 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Nov 19, 2019 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ghostscriptUpgrade libgs | Feb 26, 2020 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript-core to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Sep 3, 2019 |
| Oracle_linux | — | Upgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-cupsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgs | Jul 21, 2020 | Aug 28, 2019 |
| Redhat_linux | — | Upgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debugsourceNo solution existsUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-debuginfoUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-cupsUpgrade libgs-debuginfoUpgrade ghostscript-tools-fontsUpgrade libgs-devel | Sep 3, 2019 | Sep 2, 2019 |
| Suse | — | Upgrade ghostscript-miniUpgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-mini-develUpgrade ghostscript-devel | Sep 28, 2019 | Aug 29, 2019 |
| Ubuntu | — | Upgrade libgs9Upgrade ghostscript | Aug 30, 2019 | Aug 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub