- Security fix for CVE-2019-3835 CVE-2019-3838

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for ghostscript is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es) :

* ghostscript: superexec operator is available (700585) (CVE-2019-3835)

* ghostscript: forceput in DefineResource is still accessible (700576) (CVE-2019-3838)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) :

* ghostscript: Regression: double comment chars '%%' in gs_init.ps leading to missing metadata (BZ#1673915)

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for ghostscript is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es) :

* ghostscript: superexec operator is available (700585) (CVE-2019-3835)

* ghostscript: forceput in DefineResource is still accessible (700576) (CVE-2019-3838)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) :

* ghostscript: Regression: double comment chars '%%' in gs_init.ps leading to missing metadata (BZ#1673915)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - It was found that the superexec operator was available in the internal dictionary in ghostscript before     9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the     file system outside of the constrains imposed by -dSAFER. (CVE-2019-3835)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ghostscript packages installed that are affected by multiple vulnerabilities:

  - It was found that the forceput operator could be     extracted from the DefineResource method. A specially     crafted PostScript file could use this flaw in order to,     for example, have access to the file system outside of     the constrains imposed by -dSAFER. (CVE-2019-3838)

  - It was found that the superexec operator was available     in the internal dictionary. A specially crafted     PostScript file could use this flaw in order to, for     example, have access to the file system outside of the     constrains imposed by -dSAFER. (CVE-2019-3835)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for ghostscript fixes the following issues :

Security issues fixed :

CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. (bsc#1129180)

CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators. (bsc#1134156)

CVE-2019-12973: Fixed a denial-of-service vulnerability in the OpenJPEG function opj_t1_encode_cblks. (bsc#1140359)

CVE-2019-14811: Fixed a safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator. (bsc#1146882)

CVE-2019-14812: Fixed a safer mode bypass by .forceput exposure in setuserparams. (bsc#1146882)

CVE-2019-14813: Fixed a safer mode bypass by .forceput exposure in setsystemparams. (bsc#1146882)

CVE-2019-14817: Fixed a safer mode bypass by .forceput exposure in .pdfexectoken and other procedures. (bsc#1146884)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ghostscript fixes the following issues :

Security issues fixed :

  - CVE-2019-3835: Fixed an unauthorized file system access     caused by an available superexec operator. (bsc#1129180)

  - CVE-2019-3839: Fixed an unauthorized file system access     caused by available privileged operators. (bsc#1134156)

  - CVE-2019-12973: Fixed a denial-of-service vulnerability     in the OpenJPEG function opj_t1_encode_cblks.
    (bsc#1140359)

  - CVE-2019-14811: Fixed a safer mode bypass by .forceput     exposure in .pdf_hook_DSC_Creator. (bsc#1146882)

  - CVE-2019-14812: Fixed a safer mode bypass by .forceput     exposure in setuserparams. (bsc#1146882)

  - CVE-2019-14813: Fixed a safer mode bypass by .forceput     exposure in setsystemparams. (bsc#1146882)

  - CVE-2019-14817: Fixed a safer mode bypass by .forceput     exposure in .pdfexectoken and other procedures.
    (bsc#1146884)

This update was imported from the SUSE:SLE-15:Update update project.

ID	Name	Product	Family	Published	Updated	Severity
123534	Fedora 29 : ghostscript (2019-1a2c059afd)	Nessus	Fedora Local Security Checks	4/1/2019	6/7/2024	medium
123683	Virtuozzo 7 : ghostscript / ghostscript-cups / ghostscript-devel / etc (VZLSA-2019-0633)	Nessus	Virtuozzo Local Security Checks	4/3/2019	6/6/2024	medium
123092	CentOS 7 : ghostscript (CESA-2019:0633)	Nessus	CentOS Local Security Checks	3/26/2019	6/12/2024	medium
222893	Linux Distros Unpatched Vulnerability : CVE-2019-3835	Nessus	Misc.	3/4/2025	9/2/2026	medium
127274	NewStart CGSL CORE 5.04 / MAIN 5.04 : ghostscript Multiple Vulnerabilities (NS-SA-2019-0071)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	1/14/2021	medium
129381	SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2019:2460-1)	Nessus	SuSE Local Security Checks	9/26/2019	1/26/2022	critical
129483	openSUSE Security Update : ghostscript (openSUSE-2019-2223)	Nessus	SuSE Local Security Checks	10/1/2019	4/22/2024	critical

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

critical

critical