CVE-2019-6116: artifex ghostscript

Modified

AliasesALPINE-CVE-2019-6116MGASA-2019-0056SUSE-SU-2019:0144-1+8 more

Published 19-03-2019Last modified 04-08-2024

Vulnerability summary

CVE-2019-6116 is a high (CVSS 7.8) vulnerability in artifex ghostscript. EPSS estimates a 41.59% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 4 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 24-01-2019)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (NVD)

EPSS score

41.59%

0%100%

High · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits4reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

OPENSUSE-SU-2024:10783-1 RHSA-2019:0229

Timeline

19-03-2019
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.

CVSS metrics

6 scores · 4 sources · 3 versions

v3.17.8v3.07.8v2.06.8

EPSS trend

Probability

41.59%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 41.59% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

4 found

referenceUnverified
Exploit Reference (bugs.chromium.org)
Maturity: unknown
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
referenceUnverified
Exploit Reference (bugs.ghostscript.com)
Maturity: unknown

Show all 4 exploits

exploit-databaseremotelinuxVerified
Ghostscript 9.26 - Pseudo-Operator Remote Code Execution
Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Suse34 products

ghostscript&distro=SUSE Enterprise Storage 4< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Desktop 12 SP3< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Desktop 12 SP4< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Module for Basesystem 15< 9.26a-3.12.1
ghostscript&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 9.26a-23.19.1

ghostscript&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Server 12 SP3< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Server 12 SP4< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Server 12-LTSS< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 9.26a-23.19.1
ghostscript&distro=SUSE Linux Enterprise Software Development Kit 12 SP4< 9.26a-23.19.1
ghostscript&distro=SUSE OpenStack Cloud 7< 9.26a-23.19.1
libspectre&distro=SUSE Enterprise Storage 4< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Desktop 12 SP3< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Desktop 12 SP4< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Module for Desktop Applications 15< 0.2.8-3.6.1
libspectre&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server 12 SP3< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server 12 SP4< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server 12-LTSS< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 0.2.7-12.6.1
libspectre&distro=SUSE Linux Enterprise Software Development Kit 12 SP4< 0.2.7-12.6.1
libspectre&distro=SUSE OpenStack Cloud 7< 0.2.7-12.6.1

Show all 34

Redhat6 products

Show all 6

Opensuse3 products

leapEOL15.0 | 42.3
ghostscript-mini&distro=openSUSE Leap 15.0< 9.26a-lp150.2.12.1
ghostscript&distro=openSUSE Leap 15.0< 9.26a-lp150.2.12.1

Debian2 products

ghostscript< 9.26a~dfsg-1 | < 9.26a~dfsg-0+deb9u1 | < 9.26a~dfsg-0+deb8u1
debian_linuxEOL8.0 | 9.0

Alpine1 product

ghostscript< 9.26-r2 | < 9.26-r1

Artifex1 product

ghostscript≤ 9.26

Canonical1 product

ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 18.10

Fedoraproject1 product

fedoraEOL28 | 29 | 30

Mageia1 product

ghostscript< 9.26-1.2.mga6

Ubuntu1 product

ghostscript< 9.26~dfsg+0-0ubuntu0.14.04.4 | < 9.26~dfsg+0-0ubuntu0.16.04.4 | < 9.26~dfsg+0-0ubuntu0.18.04.4

10 vendors · 51 products

References

36 links

access.redhat.com/errata/RHSA-2019:0229Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/bid/106700VDB EntryX Refsource BIDThird Party Advisory
usn.ubuntu.com/3866-1/Vendor AdvisoryX Refsource UBUNTUWEBThird Party Advisory
www.exploit-db.com/exploits/46242/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
lists.debian.org/debian-lts-announce/2019/02/msg00016.htmlMailing ListX Refsource MLISTThird Party Advisory
packetstormsecurity.com/files/151307/Ghostscript-Pseudo-Operator-Remote-Code-Execution.htmlX Refsource MISCThird Party AdvisoryVDB Entry
www.debian.org/security/2019/dsa-4372Vendor AdvisoryX Refsource DEBIANWEBThird Party Advisory
bugs.chromium.org/p/project-zero/issues/detail?id=1729X Refsource MISCExploitIssue TrackingPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-01/msg00047.htmlX Refsource CONFIRMMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-01/msg00048.htmlX Refsource CONFIRMMailing ListThird Party Advisory

Show all 36 references

www.openwall.com/lists/oss-security/2019/01/23/5Mailing ListX Refsource MLISTExploitPatchThird Party Advisory
bugs.ghostscript.com/show_bug.cgi?id=700317X Refsource CONFIRMExploitIssue TrackingPatchThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
www.openwall.com/lists/oss-security/2019/03/21/1Mailing ListX Refsource MLISTPatchThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
seclists.org/bugtraq/2019/Apr/4Mailing ListX Refsource BUGTRAQThird Party Advisory
packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.htmlX Refsource MISCThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHBA-2019:0327Vendor AdvisoryX Refsource REDHATThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
security.gentoo.org/glsa/202004-03Vendor AdvisoryX Refsource GENTOOThird Party Advisory
security.alpinelinux.org/vuln/CVE-2019-6116Advisory
advisories.mageia.org/MGASA-2019-0056.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=24233REPORT
www.openwall.com/lists/oss-security/2019/01/23/5WEB
www.suse.com/support/update/announcement/2019/suse-su-20190144-1/Advisory
bugzilla.suse.com/1122319REPORT
www.suse.com/security/cve/CVE-2019-6116WEB
www.suse.com/support/update/announcement/2019/suse-su-20190144-2/Advisory
www.suse.com/support/update/announcement/2019/suse-su-20190145-1/Advisory
ubuntu.com/security/CVE-2019-6116REPORT
ubuntu.com/security/notices/USN-3866-1Advisory
www.cve.org/CVERecord?id=CVE-2019-6116REPORT
security-tracker.debian.org/tracker/CVE-2019-6116Advisory
lists.opensuse.org/archives/…Advisory