PT-2019-1696 · Artifex+5 · Ghostscript+5

Cedric Buissart · Published 2019-02-20 · Updated 2024-06-15 · CVE-2019-3838

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 9.27

Description The issue is related to insecure privilege management in the DefineResource method of the Ghostscript file conversion program. Exploitation of this issue could allow a remote attacker to elevate their privileges. A specially crafted PostScript file could exploit this flaw to access the file system outside of the constraints imposed by -dSAFER.

Recommendations For Ghostscript versions prior to 9.27, update to version 9.27 or later to resolve the issue. As a temporary workaround, consider restricting access to the DefineResource method until a patch is available. Avoid using the forceput operator in the DefineResource method until the issue is resolved.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-648

CWE-269

Related Identifiers

ALT-PU-2019-1913

ALT-PU-2019-1917

BDU:2019-01300

CESA-2019_0633

CESA-2019_0971

CVE-2019-3838

DLA-1761-1

DSA-4432-1

MGASA-2019-0130

OPENSUSE-SU-2019:1121-1

OPENSUSE-SU-2019_1119-1

OPENSUSE-SU-2019_1121-1

OPENSUSE-SU-2024:10783-1

RHSA-2019:0633

RHSA-2019:0971

RHSA-2019_0633

RHSA-2019_0971

SUSE-SU-2019:0718-1

SUSE-SU-2019:0719-1

SUSE-SU-2019:14155-1

SUSE-SU-2019_0718-1

SUSE-SU-2019_0719-1

USN-3915-1

Affected Products

Alt Linux

Centos

Ghostscript

Red Hat

Suse

Ubuntu

References · 129

• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00018.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05874 · Security Note
• https://access.redhat.com/errata/RHSA-2019:0971 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:1121-1 · Vendor Advisory
• https://debian.org/security/2019/dsa-4432 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-3838 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3835 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-0971.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00687 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:0718-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0130 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANBSCZABXQUEQWIKNWJ35IYX24M227EI · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3838 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02467 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25059 · Security Note