CVE-2019-14813

high-risk

Published 2019-09-06

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

Do I need to act?

8.5% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (19)

Ghostscript

Openshift Container Platform

Enterprise Linux

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Fedora

Leap

Debian Linux

Affected Vendors

Debian Redhat Fedoraproject Opensuse Artifex

References (26)

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=885444fcbe10dc4278...

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html

Third Party Advisory https://access.redhat.com/errata/RHBA-2019:2824

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:2594

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14813

Mailing List https://lists.debian.org/debian-lts-announce/2019/09/msg00007.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Mailing List https://seclists.org/bugtraq/2019/Sep/15

Third Party Advisory https://security.gentoo.org/glsa/202004-03

Third Party Advisory https://www.debian.org/security/2019/dsa-4518

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=885444fcbe10dc4278...

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html

Third Party Advisory https://access.redhat.com/errata/RHBA-2019:2824

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:2594

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14813

Mailing List https://lists.debian.org/debian-lts-announce/2019/09/msg00007.html

and 6 more references

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 10/34 · Low

Exposure 19/34 · Moderate