In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Aug 22, 2024 | Mar 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-gtkUpgrade libgs-develUpgrade ghostscript-debuginfoUpgrade ghostscript-docUpgrade ghostscript-cupsUpgrade ghostscriptUpgrade libgs | Feb 22, 2021 | Mar 21, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 19, 2019 |
| Centos_linux | — | Upgrade ghostscript-docUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscriptUpgrade ghostscript-devel | Feb 12, 2019 | Jan 24, 2019 |
| Debian | — | Upgrade ghostscript | Jan 27, 2019 | Jan 24, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Mar 21, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.27 | Apr 8, 2019 | Mar 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Apr 2, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Mar 27, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Mar 11, 2019 | Jan 23, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript/fonts/gnu-gs-fonts-other to version 6.0-11.4.9.0.1.3.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.26-11.4.9.0.1.3.0 on Solaris 11.4Upgrade print/filter/ghostscript/fonts/gnu-gs-fonts-std to version 8.11-11.4.9.0.1.3.0 on Solaris 11.4Upgrade print/filter/ghostscript-core to version 9.26-11.4.9.0.1.3.0 on Solaris 11.4 | May 30, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-devel | Jul 21, 2020 | Jan 23, 2019 |
| Redhat_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-cupsNo solution existsUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-devel | Feb 1, 2019 | Jan 31, 2019 |
| Suse | — | Upgrade ghostscript-mini-develUpgrade ghostscript-develUpgrade ghostscript-miniUpgrade libspectre-develUpgrade ghostscript-x11Upgrade libspectre1Upgrade ghostscript | Jan 24, 2019 | Jan 23, 2019 |
| Ubuntu | — | Upgrade libgs9Upgrade ghostscript | Feb 1, 2019 | Jan 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub