PT-2019-1695 · Artifex+5 · Ghostscript+5

Cedric Buissart · Published 2019-02-14 · Updated 2024-06-15 · CVE-2019-3835

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 9.27

Description The issue is related to the superexec operator being available in the internal dictionary in Ghostscript, which could allow a specially crafted PostScript file to access the file system outside of the constraints imposed by -dSAFER. This flaw is associated with insecure privilege management, potentially enabling a remote attacker to elevate their privileges.

Recommendations For Ghostscript versions prior to 9.27, update to version 9.27 or later to resolve the issue. As a temporary workaround, consider restricting access to the superexec operator in the internal dictionary until a patch is available.

Fix

Missing Authorization

Improper Privilege Management

Weakness Enumeration

CWE-862

CWE-648

CWE-269

Related Identifiers

ALT-PU-2019-1913

ALT-PU-2019-1917

BDU:2019-01299

CESA-2019_0633

CESA-2019_0971

CVE-2019-3835

DLA-1761-1

DSA-4432-1

MGASA-2019-0130

OPENSUSE-SU-2019:2222-1

OPENSUSE-SU-2019:2223-1

OPENSUSE-SU-2019_2222-1

OPENSUSE-SU-2019_2223-1

OPENSUSE-SU-2024:10783-1

RHSA-2019:0633

RHSA-2019:0971

RHSA-2019_0633

RHSA-2019_0971

SUSE-SU-2019:2460-1

SUSE-SU-2019:2478-1

USN-3915-1

Affected Products

Alt Linux

Centos

Ghostscript

Red Hat

Suse

Ubuntu

References · 149

• https://bdu.fstec.ru/vul/2022-05874 · Security Note
• https://access.redhat.com/errata/RHSA-2019:0971 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-0971.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2222-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2478-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANBSCZABXQUEQWIKNWJ35IYX24M227EI · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02467 · Security Note
• https://osv.dev/vulnerability/DLA-1761-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/ghostscript · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-3835 · Security Note
• https://linux.oracle.com/errata/ELSA-2019-0633.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-3835 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3835 · Security Note
• https://osv.dev/vulnerability/DSA-4432-1 · Vendor Advisory