Remote Code Execution in Artifex Ghostscript
Summary
CVE-2019-6116: In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution. Affects ghostscript versions < 9.26-r2. Fixed in 9.26-r2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Artifex Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is widely used for rendering and manipulating documents. However, a vulnerability has been discovered in versions up to 9.26 that allows for remote code execution. This vulnerability can be exploited through ephemeral or transient procedures, potentially granting unauthorized access to system operators.
Vulnerability Detail
The vulnerability, identified as CVE-2019-6116, originates from the insecure handling of procedures in Artifex Ghostscript. By exploiting this vulnerability, an attacker can execute arbitrary code on a remote system. This can lead to various consequences, including unauthorized access, data theft, and system compromise. The severity of this vulnerability is rated as high, with a CVSS score of 7.8.
How To Fix
Minimum fixed version
9.26-r2
This is the first release that contains the fix.
sudo apk add --upgrade ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, users can consider implementing network-level controls to restrict access to the affected system. Additionally, it is advisable to monitor network traffic for any suspicious activity and promptly investigate any potential security incidents.
Conclusion
The vulnerability in Artifex Ghostscript allows for remote code execution, posing a significant security risk. It is crucial to update to the latest version and follow the provided instructions to ensure the system is protected. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Artifex Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is commonly used for rendering and manipulating documents.
The vulnerability allows for remote code execution, which can lead to unauthorized access, data theft, and system compromise.
The CVSS score of this vulnerability is 7.8, indicating a high severity level.
To fix this vulnerability, update Artifex Ghostscript to version 9.26-r2 or later, following the official update instructions.
Implementing network-level controls and monitoring network traffic can serve as temporary workarounds to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
