medium5.5
CVE-2019-3835
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27.
Impact
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artifex | Ghostscript | before 9.27 |
| Redhat | Ansible Tower | Version 3.3 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Redhat | Enterprise Linux Server Aus | Version 7.6 |
| Redhat | Enterprise Linux Server Eus | Version 7.6 |
| Redhat | Enterprise Linux Server Tus | Version 7.6 |
| Redhat | Enterprise Linux Workstation | Version 7.0 |
| Fedoraproject | Fedora | Versions 28, 29, 30 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
| Opensuse | Leap | Versions 15.0, 15.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html
- http://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.html
- http://www.securityfocus.com/bid/107855
- https://access.redhat.com/errata/RHSA-2019:0652
- https://access.redhat.com/errata/RHSA-2019:0971
- https://bugs.ghostscript.com/show_bug.cgi?id=700585
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3835
- https://lists.debian.org/debian-lts-announce/2019/04/msg00021.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A43SRQAEHQCKSEMIBINHUNIGHTDCZD7F/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANBSCZABXQUEQWIKNWJ35IYX24M227EI/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVERLGEU3OV6RNZ2SIBXREWD3BF5H23N/
- https://seclists.org/bugtraq/2019/Apr/28
- https://seclists.org/bugtraq/2019/Apr/4
- https://security.gentoo.org/glsa/202004-03
- https://www.debian.org/security/2019/dsa-4432
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html
- http://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.html
- http://www.securityfocus.com/bid/107855
- https://access.redhat.com/errata/RHSA-2019:0652
- https://access.redhat.com/errata/RHSA-2019:0971
- https://bugs.ghostscript.com/show_bug.cgi?id=700585
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3835
- https://lists.debian.org/debian-lts-announce/2019/04/msg00021.html