CVE-2019-3839 Security feature bypass in ghostscript
Attackers can bypass sandbox restrictions in Ghostscript via crafted PostScript files to access the file system outside intended constraints.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-3839?
CVE-2019-3839 is a high-severity vulnerability in Artifex Ghostscript, published on 16 May 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable.
Weakness: CWE-648
Which versions are affected by CVE-2019-3839?
It affects 6 products.
Linux distribution packages (24)
ghostscript Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.11 |
ghostscript-cups Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.11 |
ghostscript-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.11 |
ghostscript-devel Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.11 |
ghostscript-doc Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.11 |
ghostscript-gtk Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.11 |
ghostscript Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.11 |
ghostscript-cups Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.11 |
ghostscript-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.11 |
ghostscript-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.11 |
ghostscript-doc Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.11 |
ghostscript-gtk Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.11 |
ghostscript Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.11 |
ghostscript-cups Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.11 |
ghostscript-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.11 |
ghostscript-devel Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.11 |
ghostscript-doc Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.11 |
ghostscript-gtk Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.11 |
ghostscript Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.11 |
ghostscript-cups Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.11 |
ghostscript-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.11 |
ghostscript-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.11 |
ghostscript-doc Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.11 |
ghostscript-gtk Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.11 |
Products include Artifex Ghostscript, Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Opensuse Leap, Redhat Enterprise Linux.
How do I fix CVE-2019-3839?
Upgrade to a fixed version.
Is CVE-2019-3839 being exploited?
There is no known exploitation of CVE-2019-3839 in the wild and no public exploit code.
Other vulnerabilities in Artifex Ghostscript
Sources
Also known as DEBIAN-CVE-2019-3839, DLA-1792-1, DSA-4442-1, GHSA-wxr2-p327-97jr, MGASA-2019-0188, RHSA-2019:1017 and 2 more.