In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Nov 27, 2019 | Nov 27, 2019 |
| Centos_linux | — | Upgrade libgs-debuginfoUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade ghostscript-cupsUpgrade libgs-develUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-x11-debuginfo | Aug 28, 2019 | Aug 12, 2019 |
| Debian | — | Upgrade ghostscript | Aug 14, 2019 | Aug 14, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Nov 27, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.50 | Dec 27, 2019 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Sep 28, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Feb 24, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libgsUpgrade ghostscript | Sep 30, 2019 | Aug 12, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4Upgrade print/filter/ghostscript-core to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Nov 20, 2019 |
| Oracle_linux | — | Upgrade ghostscript-tools-printingUpgrade ghostscript-gtkUpgrade ghostscript-tools-fontsUpgrade ghostscript-cupsUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-doc | Jul 21, 2020 | Aug 12, 2019 |
| Redhat_linux | — | Upgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscriptNo solution existsUpgrade ghostscript-debugsourceUpgrade libgs-debuginfoUpgrade ghostscript-docUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-printingUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade libgs-devel | Aug 13, 2019 | Aug 12, 2019 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-mini-develUpgrade ghostscript-develUpgrade ghostscript-miniUpgrade ghostscript | Sep 11, 2019 | Aug 12, 2019 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Aug 13, 2019 | Aug 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub