CVE-2019-6116

high-risk

Published 2019-03-21

In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.

Do I need to act?

67.5% chance of exploitation in next 30 days

EPSS score — higher than 32% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

46242

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (18)

Ghostscript

Fedora

Ubuntu Linux

Debian Linux

Leap

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Affected Vendors

Debian Redhat Canonical Fedoraproject Opensuse Artifex

References (44)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00047.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00048.html

Third Party Advisory http://packetstormsecurity.com/files/151307/Ghostscript-Pseudo-Operator-Remote-C...

Third Party Advisory http://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscr...

Exploit http://www.openwall.com/lists/oss-security/2019/01/23/5

Mailing List http://www.openwall.com/lists/oss-security/2019/03/21/1

Third Party Advisory http://www.securityfocus.com/bid/106700

Third Party Advisory https://access.redhat.com/errata/RHBA-2019:0327

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:0229

Exploit https://bugs.chromium.org/p/project-zero/issues/detail?id=1729

Exploit https://bugs.ghostscript.com/show_bug.cgi?id=700317

Mailing List https://lists.debian.org/debian-lts-announce/2019/02/msg00016.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Mailing List https://seclists.org/bugtraq/2019/Apr/4

Third Party Advisory https://security.gentoo.org/glsa/202004-03

Third Party Advisory https://usn.ubuntu.com/3866-1/

and 24 more references

/ 100

high-risk

Severity 24/34 · High

Exploitability 26/34 · High

Exposure 19/34 · Moderate