CVE-2019-14869
A flaw was found in all versions of ghostscript 9.x before 9.28, where the `.charkeys` procedure,...
A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
- Record
CVE-2019-14869- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-648
- Updated
- 2026-11-02
EUVDEUVD-2019-5984
A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
- Record
EUVD-2019-5984- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c87p-jj8p-c38g No score
A flaw was found in all versions of ghostscript 9.x before 9.28, where the `.charkeys` procedure,...
A flaw was found in all versions of ghostscript 9.x before 9.28, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
- Record
GHSA-c87p-jj8p-c38g- Updated
- 2026-11-02
NVD
A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
- Record
CVE-2019-14869- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-648, CWE-732
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-14869
A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
- Record
ALPINE-CVE-2019-14869- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVBELL-CVE-2019-14869
CVE-2019-14869 does not affect BellSoft software
- Record
BELL-CVE-2019-14869- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 12 moreShow less
OSV
A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
- Record
CVE-2019-14869- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-14869
A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
- Record
DEBIAN-CVE-2019-14869- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:3888
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2019:3888- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2019:3890
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2019:3890- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2020:0222
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2020:0222- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-14869
A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
- Record
UBUNTU-CVE-2019-14869- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVMGASA-2019-0336 No score
Updated ghostscript packages fix security vulnerability
The updated packages fix a security vulnerability:
-dSAFER escape in .charkeys. (CVE-2019-14869)
- Record
MGASA-2019-0336- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2534-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2534-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2535-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2535-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2981-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).
- Record
SUSE-SU-2019:2981-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2983-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issue:
- CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).
- Record
SUSE-SU-2019:2983-1- Updated
- 2026-11-02
OSVUSN-4193-1 No score
ghostscript vulnerability
Paul Manfred and Lukas Schauer discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service.
- Record
USN-4193-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.10 |
9.00 up to 9.27-r5 | 9.27-r5 |
ghostscriptAlpine:v3.11 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.12 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.13 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.14 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.15 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.16 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.17 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.18 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.19 |
9.00 up to 9.50-r0 | 9.50-r0 |
Show 94 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.20 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.21 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.22 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.23 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.24 |
9.00 up to 9.50-r0 | 9.50-r0 |
ghostscriptAlpine:v3.9 |
9.00 up to 9.26-r5 | 9.26-r5 |
ghostscriptDebian:12 |
before 9.50~dfsg-3 | 9.50~dfsg-3 |
ghostscriptDebian:13 |
before 9.50~dfsg-3 | 9.50~dfsg-3 |
ghostscriptDebian:14 |
before 9.50~dfsg-3 | 9.50~dfsg-3 |
ghostscriptDebian:8 |
before 9.26a~dfsg-0+deb8u6, plus listed versions 9.06~dfsg-29.06~dfsg-2+deb8u19.06~dfsg-2+deb8u109.06~dfsg-2+deb8u119.06~dfsg-2+deb8u12 Show 45 moreShow less9.06~dfsg-2+deb8u139.06~dfsg-2+deb8u29.06~dfsg-2+deb8u39.06~dfsg-2+deb8u49.06~dfsg-2+deb8u59.06~dfsg-2+deb8u69.06~dfsg-2+deb8u79.06~dfsg-2+deb8u89.06~dfsg-2+deb8u99.10~dfsg-19.15~dfsg-19.15~rc1~dfsg-19.16~dfsg-19.16~dfsg-29.16~dfsg-2+sparc649.16~dfsg-2.19.16~dfsg-2.1+sparc649.18~dfsg-19.18~dfsg-29.18~dfsg-39.18~dfsg-49.19~dfsg-19.19~dfsg-29.19~dfsg-39.19~dfsg-3.19.19~~rc1~dfsg-19.20~dfsg-19.20~dfsg-1~exp19.20~dfsg-29.20~dfsg-39.20~dfsg-3.19.20~dfsg-3.29.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-3 |
9.26a~dfsg-0+deb8u6 |
ghostscriptDebian:9 |
before 9.26a~dfsg-0+deb9u6, plus listed versions 9.20~dfsg-3.29.20~dfsg-3.2+deb9u19.20~dfsg-3.2+deb9u29.20~dfsg-3.2+deb9u39.20~dfsg-3.2+deb9u4 Show 28 moreShow less9.20~dfsg-3.2+deb9u59.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-0+deb9u19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-39.25~dfsg-49.25~dfsg-59.25~dfsg-69.25~dfsg-79.26a~dfsg-0+deb9u19.26a~dfsg-0+deb9u29.26a~dfsg-0+deb9u39.26a~dfsg-0+deb9u49.26a~dfsg-0+deb9u59.26~dfsg-0+deb9u19.26~dfsg-0+deb9u29.26~dfsg-19.26~dfsg-2 |
9.26a~dfsg-0+deb9u6 |
ghostscriptDebian:10 |
before 9.27~dfsg-2+deb10u3, plus listed versions 9.27~dfsg-29.27~dfsg-2+deb10u19.27~dfsg-2+deb10u2 |
9.27~dfsg-2+deb10u3 |
ghostscriptMageia:7 |
before 9.27-1.4.mga7 | 9.27-1.4.mga7 |
ghostscriptRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-cupsRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
libgsRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-docRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-gtkRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
libgs-develRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscriptRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-cupsRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
libgsRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-docRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-gtkRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
libgs-develRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscriptRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-cupsRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
libgsRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-docRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-gtkRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
libgs-develRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscriptRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-cupsRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
libgsRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-docRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscript-gtkRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
libgs-develRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.3 | 0:9.25-2.el7_7.3 |
ghostscriptRed Hat:enterprise_linux:8::appstream |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
libgsRed Hat:enterprise_linux:8::appstream |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
libgs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-docRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-tools-dvipdfRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-tools-fontsRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-tools-printingRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-x11Red Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
libgs-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
libgs-develRed Hat:enterprise_linux:8::crb |
before 0:9.25-5.el8_1.1 | 0:9.25-5.el8_1.1 |
ghostscriptRed Hat:rhel_e4s:8.0::appstream |
before 0:9.25-2.el8_0.4 | 0:9.25-2.el8_0.4 |
ghostscript-debuginfoRed Hat:rhel_e4s:8.0::appstream |
before 0:9.25-2.el8_0.4 | 0:9.25-2.el8_0.4 |
ghostscript-debugsourceRed Hat:rhel_e4s:8.0::appstream |
before 0:9.25-2.el8_0.4 | 0:9.25-2.el8_0.4 |
ghostscript-gtk-debuginfoRed Hat:rhel_e4s:8.0::appstream |
before 0:9.25-2.el8_0.4 | 0:9.25-2.el8_0.4 |
ghostscript-x11-debuginfoRed Hat:rhel_e4s:8.0::appstream |
before 0:9.25-2.el8_0.4 | 0:9.25-2.el8_0.4 |
libgsRed Hat:rhel_e4s:8.0::appstream |
before 0:9.25-2.el8_0.4 | 0:9.25-2.el8_0.4 |
libgs-debuginfoRed Hat:rhel_e4s:8.0::appstream |
before 0:9.25-2.el8_0.4 | 0:9.25-2.el8_0.4 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 |
before 9.27-3.24.1 | 9.27-3.24.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 9.27-3.24.1 | 9.27-3.24.1 |
ghostscriptSUSE:HPE Helion OpenStack 8 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:OpenStack Cloud 7 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:OpenStack Cloud 8 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:OpenStack Cloud Crowbar 8 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Desktop 12 SP4 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP1-LTSS |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP2-BCL |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP3-BCL |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP4 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP5 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptSUSE:Enterprise Storage 5 |
before 9.27-23.31.1 | 9.27-23.31.1 |
ghostscriptUbuntu:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.12, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 19 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.11 |
9.26~dfsg+0-0ubuntu0.16.04.12 |
ghostscriptUbuntu:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.12, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 11 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.11 |
9.26~dfsg+0-0ubuntu0.18.04.12 |
ghostscriptopenSUSE:Leap 15.0 |
before 9.27-lp150.2.26.1 | 9.27-lp150.2.26.1 |
ghostscript-miniopenSUSE:Leap 15.0 |
before 9.27-lp150.2.26.1 | 9.27-lp150.2.26.1 |
ghostscriptopenSUSE:Leap 15.1 |
before 9.27-lp151.3.9.1 | 9.27-lp151.3.9.1 |
ghostscript-miniopenSUSE:Leap 15.1 |
before 9.27-lp151.3.9.1 | 9.27-lp151.3.9.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14869 is a high vulnerability (CVSS 7.3) in Artifex Ghostscript, published November 14, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.09%, the 87th percentile. Fixed in ghostscript 9.27-r5.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14869
openwall.com/lists/oss-security/2019/11/15/1
git.ghostscript.com?p=ghostpdl.git%3Ba=commitdiff%3Bh=485904772c5f
bugs.ghostscript.com/show_bug.cgi?id=701841
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IX55AEDERTDFEZAROKZW64MZRPLINEGI
seclists.org/bugtraq/2019/Nov/27
Show 34 moreShow less
lists.opensuse.org/opensuse-security-announce/2019-11/msg00049.html
access.redhat.com/errata/RHSA-2020:0222
jvn.jp/en/jp/JVN52486659/index.html
nvd.nist.gov/vuln/detail/CVE-2019-14869
github.com/advisories/GHSA-c87p-jj8p-c38g
security.alpinelinux.org/vuln/CVE-2019-14869
docs.bell-sw.com/security/cves/CVE-2019-14869
security-tracker.debian.org/tracker/CVE-2019-14869
advisories.mageia.org/MGASA-2019-0336.html
bugs.mageia.org/show_bug.cgi?id=25697
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3888.json
cve.org/CVERecord?id=CVE-2019-14869
suse.com/support/update/announcement/2019/suse-su-20192981-1
bugzilla.suse.com/1156275
ubuntu.com/security/CVE-2019-14869
Left out here: 11 versions. The JSON record has them.