p PatchFirst

CVE-2019-3835

CVE-2019-3835

This page contains facts from public vulnerability sources. Check the original advisory before updating.

It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.

CVSS 7.3 · High · EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • ghostscript

    Versions
    • 9.27: Affected

    No fix published

  • ghostscript Debian:12

    Affected ranges
    • ECOSYSTEM: < 9.27~dfsg-1

    Update to 9.27~dfsg-1

  • ghostscript Debian:13

    Affected ranges
    • ECOSYSTEM: < 9.27~dfsg-1

    Update to 9.27~dfsg-1

  • ghostscript Debian:14

    Affected ranges
    • ECOSYSTEM: < 9.27~dfsg-1

    Update to 9.27~dfsg-1

  • ghostscript Ubuntu:14.04:LTS

    Versions
    • 9.10~dfsg-0ubuntu2
    • 9.10~dfsg-0ubuntu3
    • 9.10~dfsg-0ubuntu4
    • 9.10~dfsg-0ubuntu5
    • 9.10~dfsg-0ubuntu6
    • 9.10~dfsg-0ubuntu7
    • 9.10~dfsg-0ubuntu8
    • 9.10~dfsg-0ubuntu9
    • 9.10~dfsg-0ubuntu10
    • 9.10~dfsg-0ubuntu10.1
    • 9.10~dfsg-0ubuntu10.2
    • 9.10~dfsg-0ubuntu10.3
    • 9.10~dfsg-0ubuntu10.4
    • 9.10~dfsg-0ubuntu10.5
    • 9.10~dfsg-0ubuntu10.6
    • 9.10~dfsg-0ubuntu10.7
    • 9.10~dfsg-0ubuntu10.9
    • 9.10~dfsg-0ubuntu10.10
    • 9.10~dfsg-0ubuntu10.12
    • 9.10~dfsg-0ubuntu10.13
    • 9.25~dfsg+1-0ubuntu0.14.04.1
    • 9.25~dfsg+1-0ubuntu0.14.04.2
    • 9.25~dfsg+1-0ubuntu0.14.04.3
    • 9.26~dfsg+0-0ubuntu0.14.04.1
    • 9.26~dfsg+0-0ubuntu0.14.04.3
    • 9.26~dfsg+0-0ubuntu0.14.04.4
    • 9.26~dfsg+0-0ubuntu0.14.04.5
    • 9.26~dfsg+0-0ubuntu0.14.04.6
    • 9.26~dfsg+0-0ubuntu0.14.04.7
    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.14.04.8

    Update to 9.26~dfsg+0-0ubuntu0.14.04.8

  • ghostscript Ubuntu:16.04:LTS

    Versions
    • 9.16~dfsg~0-0ubuntu3
    • 9.16~dfsg~0-0ubuntu4
    • 9.18~dfsg~0-0ubuntu1
    • 9.18~dfsg~0-0ubuntu2
    • 9.18~dfsg~0-0ubuntu2.2
    • 9.18~dfsg~0-0ubuntu2.3
    • 9.18~dfsg~0-0ubuntu2.4
    • 9.18~dfsg~0-0ubuntu2.6
    • 9.18~dfsg~0-0ubuntu2.7
    • 9.18~dfsg~0-0ubuntu2.8
    • 9.18~dfsg~0-0ubuntu2.9
    • 9.25~dfsg+1-0ubuntu0.16.04.1
    • 9.25~dfsg+1-0ubuntu0.16.04.2
    • 9.25~dfsg+1-0ubuntu0.16.04.3
    • 9.26~dfsg+0-0ubuntu0.16.04.1
    • 9.26~dfsg+0-0ubuntu0.16.04.3
    • 9.26~dfsg+0-0ubuntu0.16.04.4
    • 9.26~dfsg+0-0ubuntu0.16.04.5
    • 9.26~dfsg+0-0ubuntu0.16.04.6
    • 9.26~dfsg+0-0ubuntu0.16.04.7
    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.16.04.8

    Update to 9.26~dfsg+0-0ubuntu0.16.04.8

  • ghostscript Ubuntu:18.04:LTS

    Versions
    • 9.21~dfsg+1-0ubuntu3
    • 9.22~dfsg+1-0ubuntu1
    • 9.22~dfsg+1-0ubuntu1.1
    • 9.22~dfsg+1-0ubuntu1.2
    • 9.25~dfsg+1-0ubuntu0.18.04.1
    • 9.25~dfsg+1-0ubuntu0.18.04.2
    • 9.26~dfsg+0-0ubuntu0.18.04.1
    • 9.26~dfsg+0-0ubuntu0.18.04.3
    • 9.26~dfsg+0-0ubuntu0.18.04.4
    • 9.26~dfsg+0-0ubuntu0.18.04.5
    • 9.26~dfsg+0-0ubuntu0.18.04.6
    • 9.26~dfsg+0-0ubuntu0.18.04.7
    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg+0-0ubuntu0.18.04.8

    Update to 9.26~dfsg+0-0ubuntu0.18.04.8

Original sources

Check your server →