CVE-2019-14869
High
Description
A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Artifex Ghostscript
PublishedNov 15, 2019
First seenNov 15, 2019
Weakness typeCWE-648CWE-648
How to fix
Update
- artifex ghostscript9.50 or later
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IX55AEDERTDFEZAROKZW64MZRPLINEGI/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HC4REO73BEJOJAU7NHFHJECAUAYJUE3H/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Q4E3OTDAJRSUCOBTDQO7Y5UTE2FFMLF/
- access.redhat.com/errata/RHSA-2020:0222
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| artifex ghostscript | 9.00 ≤ v < 9.50 | 9.50 |
| fedoraproject fedora | 29, 30, 31 | — |
| opensuse leap | 15.0, 15.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.