← back
CVE-2019-6116

CVE-2019-6116

EPSS 43.9%
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
Affected products
n/a · n/a
public PoCs found — 4
cve_referencepacketstormsecurity.com/files/151307/Ghostscript-Pseudo-Operator-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.htmlunverifiedcve_referencewww.exploit-db.com/exploits/46242/unverifiedexploitdbwww.exploit-db.com/exploits/46242unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00047.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-01/msg00048.htmlhttp://packetstormsecurity.com/files/151307/Ghostscript-Pseudo-Operator-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.htmlhttps://access.redhat.com/errata/RHBA-2019:0327https://access.redhat.com/errata/RHSA-2019:0229https://bugs.chromium.org/p/project-zero/issues/detail?id=1729https://bugs.ghostscript.com/show_bug.cgi?id=700317https://lists.debian.org/debian-lts-announce/2019/02/msg00016.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AATIHU32MYKUOXQDJQU4X4DDVL7NAY3/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N6T5L3SSJX2AVUPHP7GCPATFWUPKZT2/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MWVAVCDXBLPLJMVGNSKGGDTBEOHCJBKK/