A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Nov 8, 2019 | Sep 3, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgs-develUpgrade libgs | Feb 22, 2021 | Sep 3, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 3, 2019 |
| Centos_linux | — | Upgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-gtkUpgrade libgs-develUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscript-debuginfoUpgrade libgs-debuginfo | Sep 3, 2019 | Sep 2, 2019 |
| Debian | — | Upgrade ghostscript | Sep 9, 2019 | Sep 3, 2019 |
| Freebsd | — | Upgrade ghostscript9-agpl-baseUpgrade ghostscript9-agpl-x11 | Dec 10, 2019 | Dec 9, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Sep 3, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.50 | Sep 11, 2019 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Jun 17, 2020 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Nov 19, 2019 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Nov 19, 2019 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libgsUpgrade ghostscript | Feb 26, 2020 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4Upgrade print/filter/ghostscript-core to version 9.27-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Sep 3, 2019 |
| Oracle_linux | — | Upgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscript-cupsUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtkUpgrade libgsUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-doc | Jul 21, 2020 | Aug 28, 2019 |
| Redhat_linux | — | Upgrade ghostscript-gtk-debuginfoUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgs-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-tools-fontsUpgrade ghostscript-docUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-gtkNo solution existsUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-tools-printing | Sep 3, 2019 | Sep 2, 2019 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-mini-develUpgrade ghostscript-develUpgrade ghostscriptUpgrade ghostscript-mini | Sep 27, 2019 | Aug 29, 2019 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Aug 30, 2019 | Aug 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub