CVE-2019-14813
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
Affected Platforms (CPE)
📦
Artifex
Ghostscript
>= 9.00 and <= 9.50📦
Redhat
Openshift Container Platform
= 3.11📦
Redhat
Openshift Container Platform
= 4.1💻
Redhat
Enterprise Linux
= 7.0💻
Redhat
Enterprise Linux
= 8.0💻
Redhat
Enterprise Linux Desktop
= 7.0💻
Redhat
Enterprise Linux Server
= 7.0💻
Redhat
Enterprise Linux Server Aus
= 7.7💻
Redhat
Enterprise Linux Server Eus
= 7.7💻
Redhat
Enterprise Linux Server Tus
= 7.7💻
Redhat
Enterprise Linux Workstation
= 7.0💻
Fedoraproject
Fedora
= 29💻
Fedoraproject
Fedora
= 30💻
Fedoraproject
Fedora
= 31💻
Opensuse
Leap
= 15.0💻
Opensuse
Leap
= 15.1💻
Debian
Debian Linux
= 8.0💻
Debian
Debian Linux
= 9.0💻
Debian