In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ghostscript | Aug 22, 2024 | Mar 19, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ghostscriptamazon-linux-ami-2-upgrade-ghostscript-cupsamazon-linux-ami-2-upgrade-ghostscript-debuginfoamazon-linux-ami-2-upgrade-ghostscript-docamazon-linux-ami-2-upgrade-ghostscript-gtkamazon-linux-ami-2-upgrade-libgsamazon-linux-ami-2-upgrade-libgs-devel | Feb 22, 2021 | Mar 21, 2019 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 19, 2019 |
| Centos_linux | — | centos-upgrade-ghostscriptcentos-upgrade-ghostscript-cupscentos-upgrade-ghostscript-debuginfocentos-upgrade-ghostscript-develcentos-upgrade-ghostscript-doccentos-upgrade-ghostscript-gtk | Feb 12, 2019 | Jan 24, 2019 |
| Debian | debian-upgrade-ghostscript | Jan 27, 2019 | Jan 24, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-app-text-ghostscript-gpl | Apr 2, 2020 | Mar 21, 2019 | |
| Ghostscript | ghostscript-upgrade-latest | Apr 8, 2019 | Mar 19, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-ghostscripthuawei-euleros-2_0_sp2-upgrade-ghostscript-cups | Apr 2, 2019 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-ghostscripthuawei-euleros-2_0_sp3-upgrade-ghostscript-cups | Mar 27, 2019 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-ghostscripthuawei-euleros-2_0_sp5-upgrade-ghostscript-cups | Mar 11, 2019 | Jan 23, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-print-filter-ghostscript-9-26-11-4-9-0-1-3-0oracle-solaris-11-4-upgrade-print-filter-ghostscript-core-9-26-11-4-9-0-1-3-0oracle-solaris-11-4-upgrade-print-filter-ghostscript-fonts-gnu-gs-fonts-other-6-0-11-4-9-0-1-3-0oracle-solaris-11-4-upgrade-print-filter-ghostscript-fonts-gnu-gs-fonts-std-8-11-11-4-9-0-1-3-0 | May 30, 2019 | Mar 21, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-ghostscriptoracle-linux-upgrade-ghostscript-cupsoracle-linux-upgrade-ghostscript-develoracle-linux-upgrade-ghostscript-docoracle-linux-upgrade-ghostscript-gtk | Jul 21, 2020 | Jan 23, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-ghostscriptredhat-upgrade-ghostscript-cupsredhat-upgrade-ghostscript-debuginforedhat-upgrade-ghostscript-develredhat-upgrade-ghostscript-docredhat-upgrade-ghostscript-gtk | Feb 1, 2019 | Jan 31, 2019 | |
| Suse | — | suse-upgrade-ghostscriptsuse-upgrade-ghostscript-develsuse-upgrade-ghostscript-minisuse-upgrade-ghostscript-mini-develsuse-upgrade-ghostscript-x11suse-upgrade-libspectre-develsuse-upgrade-libspectre1 | Jan 24, 2019 | Jan 23, 2019 |
| Ubuntu | ubuntu-upgrade-ghostscriptubuntu-upgrade-libgs9 | Feb 1, 2019 | Jan 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub