CVE-2019-14817: High severity ghostscript vulnerability
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14817?
The severity of CVE-2019-14817 is high with a score of 7.8.
How does CVE-2019-14817 affect Ghostscript?
CVE-2019-14817 affects Ghostscript versions prior to 9.50, allowing scripts to bypass `-dSAFER` restrictions.
How can a specially crafted PostScript file exploit CVE-2019-14817?
A specially crafted PostScript file can disable security protection and gain unauthorized access.
What is the remedy for CVE-2019-14817 in Debian Linux?
To remediate CVE-2019-14817 in Debian Linux, update Ghostscript to version 9.27~dfsg-2+deb10u5 or later.
What is the remedy for CVE-2019-14817 in Red Hat Openshift Container Platform?
To remediate CVE-2019-14817 in Red Hat Openshift Container Platform, update to version 3.11 or later.