CVE-2019-6116

Description (CNA)

In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://access.redhat.com/errata/RHSA-2019:0229
• http://www.securityfocus.com/bid/106700
• https://usn.ubuntu.com/3866-1/
• https://www.exploit-db.com/exploits/46242/
• https://lists.debian.org/debian-lts-announce/2019/02/msg00016.html
• http://packetstormsecurity.com/files/151307/Ghostscript-Pseudo-Operator-Remote-Code-Execution.html
• https://www.debian.org/security/2019/dsa-4372
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1729
• http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00047.html
• http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00048.html
• http://www.openwall.com/lists/oss-security/2019/01/23/5
• https://bugs.ghostscript.com/show_bug.cgi?id=700317
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MWVAVCDXBLPLJMVGNSKGGDTBEOHCJBKK/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N6T5L3SSJX2AVUPHP7GCPATFWUPKZT2/
• http://www.openwall.com/lists/oss-security/2019/03/21/1
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVWXVKG72IGEJYHLWE6H3CGALHGFSGGY/
• https://seclists.org/bugtraq/2019/Apr/4
• http://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.html
• https://access.redhat.com/errata/RHBA-2019:0327
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZP34D27RKYV2POJ3NJLSVCHUA5V5C45A/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AATIHU32MYKUOXQDJQU4X4DDVL7NAY3/
• https://security.gentoo.org/glsa/202004-03

ADP enrichment