CVE-2019-14817: High severity Artifex Ghostscript vulnerability
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 9.27~dfsg-2+deb10u5Fixed in 9.27~dfsg-2+deb10u9Fixed in 9.53.3~dfsg-7+deb11u6Fixed in 9.53.3~dfsg-7+deb11u5Fixed in 10.0.0~dfsg-11+deb12u2Fixed in 10.0.0~dfsg-11+deb12u1Fixed in 10.02.0~dfsg-2 - Upgrade
Upgrade
alpine/ghostscriptto a version that resolves this vulnerability.Fixed in 9.27-r4 - Upgrade
Upgrade
alpine/ghostscriptto a version that resolves this vulnerability.Fixed in 9.26-r4 - Upgrade
Upgrade
Ghostscriptto a version that resolves this vulnerability.Fixed in 9.50
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14817?
The severity of CVE-2019-14817 is high with a score of 7.8.
How does CVE-2019-14817 affect Ghostscript?
CVE-2019-14817 affects Ghostscript versions prior to 9.50, allowing scripts to bypass `-dSAFER` restrictions.
How can a specially crafted PostScript file exploit CVE-2019-14817?
A specially crafted PostScript file can disable security protection and gain unauthorized access.
What is the remedy for CVE-2019-14817 in Debian Linux?
To remediate CVE-2019-14817 in Debian Linux, update Ghostscript to version 9.27~dfsg-2+deb10u5 or later.
What is the remedy for CVE-2019-14817 in Red Hat Openshift Container Platform?
To remediate CVE-2019-14817 in Red Hat Openshift Container Platform, update to version 3.11 or later.