In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Aug 22, 2024 | Mar 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libgs-develUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-doc | Feb 22, 2021 | Mar 21, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 19, 2019 |
| Centos_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-develUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-debuginfo | Feb 12, 2019 | Jan 24, 2019 |
| Debian | — | Upgrade ghostscript | Jan 27, 2019 | Jan 24, 2019 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Apr 2, 2020 | Mar 21, 2019 |
| Ghostscript | — | Upgrade to Ghostscript version 9.27 | Apr 8, 2019 | Mar 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Apr 2, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Mar 27, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Mar 11, 2019 | Jan 23, 2019 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript/fonts/gnu-gs-fonts-std to version 8.11-11.4.9.0.1.3.0 on Solaris 11.4Upgrade print/filter/ghostscript-core to version 9.26-11.4.9.0.1.3.0 on Solaris 11.4Upgrade print/filter/ghostscript/fonts/gnu-gs-fonts-other to version 6.0-11.4.9.0.1.3.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.26-11.4.9.0.1.3.0 on Solaris 11.4 | May 30, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-doc | Jul 21, 2020 | Jan 23, 2019 |
| Redhat_linux | — | Upgrade ghostscriptUpgrade ghostscript-develNo solution existsUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-cups | Feb 1, 2019 | Jan 31, 2019 |
| Suse | — | Upgrade ghostscriptUpgrade libspectre-develUpgrade libspectre1Upgrade ghostscript-miniUpgrade ghostscript-x11Upgrade ghostscript-mini-develUpgrade ghostscript-devel | Jan 24, 2019 | Jan 23, 2019 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Feb 1, 2019 | Jan 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub