CVE-2019-14811 — Incorrect Use of Privileged APIs in Ghostscript

CWE-648 — Incorrect Use of Privileged APIsCWE-863 — Incorrect Authorization10 documents8 sources
Severity
7.8HIGHNVD
EPSS
1.7%
top 17.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Artifex GhostscriptArtifex Software GhostscriptDebian Linux+3 more
Timeline
PublishedSep 3
Latest updateMay 24

Description

A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶Debianartifex/ghostscript< 9.28~~rc2~dfsg-1+3
▶Ubuntuartifex/ghostscript< 9.26~dfsg+0-0ubuntu0.16.04.11+1
▶CVEListV5artifex_software/ghostscriptghostscript versions prior to 9.28
▶NVDopensuse/leap15.0, 15.1+1

Also affects: Debian Linux 10.0, 8.0, 9.0, Fedora 29, 30, 31, Openshift Container Platform 3.11, 4.1

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-q58c-x76h-3jhc: A flaw was found in, ghostscript versions prior to 9↗2022-05-24
▶
OSV
CVE-2019-14811: A flaw was found in, ghostscript versions prior to 9↗2019-09-03
▶
CVEList
CVE-2019-14811: A flaw was found in, ghostscript versions prior to 9↗2019-09-03
▶
OSV
ghostscript vulnerabilities↗2019-08-29
▶

📋Vendor Advisories

3
Ubuntu
Ghostscript vulnerabilities↗2019-08-29
▶
Red Hat
ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445)↗2019-08-28
▶
Debian
CVE-2019-14811: ghostscript - A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Cr...↗2019
▶

💬Community

2
Bugzilla
CVE-2019-14811 ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445) [fedora-all]↗2019-09-02
▶
Bugzilla
CVE-2019-14811 ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445)↗2019-08-20
▶
CVE-2019-14811 — Incorrect Use of Privileged APIs | cvebase