CVE-2019-6116
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...
7.8 HighPublic exploitFix available
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
41.6%Up 8.9 points since Apr 14, 2021
What each source reports
NVD Score used
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Record
CVE-2019-6116- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Record
CVE-2019-6116- Updated
- 2026-11-02
EUVDEUVD-2019-15683 No score
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Record
EUVD-2019-15683- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6vrc-h32p-948x
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Record
GHSA-6vrc-h32p-948x- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALPINE-CVE-2019-6116
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Record
ALPINE-CVE-2019-6116- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVBELL-CVE-2019-6116
CVE-2019-6116 does not affect BellSoft software
- Record
BELL-CVE-2019-6116- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSV
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Record
CVE-2019-6116- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-6116
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Record
DEBIAN-CVE-2019-6116- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:0229
Red Hat Security Advisory: ghostscript security and bug fix update
- Record
RHSA-2019:0229- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-6116
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
- Record
UBUNTU-CVE-2019-6116- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0056 No score
Updated ghostscript packages fix a security vulnerability
Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file. (CVE-2019-6116)
- Record
MGASA-2019-0056- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0104-1 No score
Security update for ghostscript
This update for ghostscript version 9.26a fixes the following issues:
Security issue fixed:
- CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators (bsc#1122319)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0104-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10783-1 No score
ghostscript-9.54.0-2.2 on GA media
These are all security issues fixed in the ghostscript-9.54.0-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10783-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0144-1 No score
Security update for ghostscript
This update for ghostscript to version 9.26a fixes the following issues:
Security issue fixed:
- CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators (bsc#1122319)
- Record
SUSE-SU-2019:0144-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0144-2 No score
Security update for ghostscript
This update for ghostscript to version 9.26a fixes the following issues:
Security issue fixed:
- CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators (bsc#1122319)
- Record
SUSE-SU-2019:0144-2- Updated
- 2026-11-02
OSVSUSE-SU-2019:0145-1 No score
Security update for ghostscript
This update for ghostscript version 9.26a fixes the following issues:
Security issue fixed:
- CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators (bsc#1122319)
- Record
SUSE-SU-2019:0145-1- Updated
- 2026-11-02
OSVUSN-3866-1 No score
ghostscript vulnerability
Tavis Ormandy discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service.
- Record
USN-3866-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.10 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.11 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.12 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.13 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.14 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.15 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.16 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.17 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.18 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.19 |
before 9.26-r1 | 9.26-r1 |
Show 79 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.20 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.21 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.22 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.23 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.24 |
before 9.26-r1 | 9.26-r1 |
ghostscriptAlpine:v3.6 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.7 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.8 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.9 |
before 9.26-r2 | 9.26-r2 |
ghostscriptDebian:12 |
before 9.26a~dfsg-1 | 9.26a~dfsg-1 |
ghostscriptDebian:13 |
before 9.26a~dfsg-1 | 9.26a~dfsg-1 |
ghostscriptDebian:14 |
before 9.26a~dfsg-1 | 9.26a~dfsg-1 |
ghostscriptDebian:8 |
before 9.26a~dfsg-0+deb8u1, plus listed versions 9.06~dfsg-29.06~dfsg-2+deb8u19.06~dfsg-2+deb8u109.06~dfsg-2+deb8u119.06~dfsg-2+deb8u12 Show 45 moreShow less9.06~dfsg-2+deb8u139.06~dfsg-2+deb8u29.06~dfsg-2+deb8u39.06~dfsg-2+deb8u49.06~dfsg-2+deb8u59.06~dfsg-2+deb8u69.06~dfsg-2+deb8u79.06~dfsg-2+deb8u89.06~dfsg-2+deb8u99.10~dfsg-19.15~dfsg-19.15~rc1~dfsg-19.16~dfsg-19.16~dfsg-29.16~dfsg-2+sparc649.16~dfsg-2.19.16~dfsg-2.1+sparc649.18~dfsg-19.18~dfsg-29.18~dfsg-39.18~dfsg-49.19~dfsg-19.19~dfsg-29.19~dfsg-39.19~dfsg-3.19.19~~rc1~dfsg-19.20~dfsg-19.20~dfsg-1~exp19.20~dfsg-29.20~dfsg-39.20~dfsg-3.19.20~dfsg-3.29.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-3 |
9.26a~dfsg-0+deb8u1 |
ghostscriptDebian:9 |
before 9.26a~dfsg-0+deb9u1, plus listed versions 9.20~dfsg-3.29.20~dfsg-3.2+deb9u19.20~dfsg-3.2+deb9u29.20~dfsg-3.2+deb9u39.20~dfsg-3.2+deb9u4 Show 23 moreShow less9.20~dfsg-3.2+deb9u59.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-0+deb9u19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-39.25~dfsg-49.25~dfsg-59.25~dfsg-69.25~dfsg-79.26~dfsg-0+deb9u19.26~dfsg-0+deb9u29.26~dfsg-19.26~dfsg-2 |
9.26a~dfsg-0+deb9u1 |
ghostscriptMageia:6 |
before 9.26-1.2.mga6 | 9.26-1.2.mga6 |
ghostscriptRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-cupsRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-develRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-docRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-gtkRed Hat:enterprise_linux:7::client From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscriptRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-cupsRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-develRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-docRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-gtkRed Hat:enterprise_linux:7::computenode From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscriptRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-cupsRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-develRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-docRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-gtkRed Hat:enterprise_linux:7::server From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscriptRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-cupsRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-develRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-docRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscript-gtkRed Hat:enterprise_linux:7::workstation From an advisory covering 5 CVEs |
before 0:9.07-31.el7_6.9 | 0:9.07-31.el7_6.9 |
ghostscriptSUSE:OpenStack Cloud 7 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:OpenStack Cloud 7 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Desktop 12 SP3 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Desktop 12 SP3 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Desktop 12 SP4 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Desktop 12 SP4 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Software Development Kit 12 SP3 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Software Development Kit 12 SP3 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server 12-LTSS |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server 12-LTSS |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP1-LTSS |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server 12 SP1-LTSS |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP2-BCL |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server 12 SP2-BCL |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP3 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server 12 SP3 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP4 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server 12 SP4 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Enterprise Storage 4 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Enterprise Storage 4 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 9.26a-23.19.1 | 9.26a-23.19.1 |
libspectreSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 0.2.7-12.6.1 | 0.2.7-12.6.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 |
before 9.26a-3.12.1 | 9.26a-3.12.1 |
libspectreSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 0.2.8-3.6.1 | 0.2.8-3.6.1 |
ghostscriptUbuntu:14.04:LTS |
before 9.26~dfsg+0-0ubuntu0.14.04.4, plus listed versions 9.10~dfsg-0ubuntu29.10~dfsg-0ubuntu39.10~dfsg-0ubuntu49.10~dfsg-0ubuntu59.10~dfsg-0ubuntu6 Show 20 moreShow less9.10~dfsg-0ubuntu79.10~dfsg-0ubuntu89.10~dfsg-0ubuntu99.10~dfsg-0ubuntu109.10~dfsg-0ubuntu10.19.10~dfsg-0ubuntu10.29.10~dfsg-0ubuntu10.39.10~dfsg-0ubuntu10.49.10~dfsg-0ubuntu10.59.10~dfsg-0ubuntu10.69.10~dfsg-0ubuntu10.79.10~dfsg-0ubuntu10.99.10~dfsg-0ubuntu10.109.10~dfsg-0ubuntu10.129.10~dfsg-0ubuntu10.139.25~dfsg+1-0ubuntu0.14.04.19.25~dfsg+1-0ubuntu0.14.04.29.25~dfsg+1-0ubuntu0.14.04.39.26~dfsg+0-0ubuntu0.14.04.19.26~dfsg+0-0ubuntu0.14.04.3 |
9.26~dfsg+0-0ubuntu0.14.04.4 |
ghostscriptUbuntu:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.4, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 11 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.3 |
9.26~dfsg+0-0ubuntu0.16.04.4 |
ghostscriptUbuntu:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.4, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.19.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.3 |
9.26~dfsg+0-0ubuntu0.18.04.4 |
ghostscriptopenSUSE:Leap 15.0 |
before 9.26a-lp150.2.12.1 | 9.26a-lp150.2.12.1 |
ghostscript-miniopenSUSE:Leap 15.0 |
before 9.26a-lp150.2.12.1 | 9.26a-lp150.2.12.1 |
ghostscriptopenSUSE:Tumbleweed From an advisory covering 44 CVEs |
before 9.54.0-2.2 | 9.54.0-2.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ghostscript 9.26 - Pseudo-Operator Remote Code Execution | 2019-01-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-6116 is a high vulnerability (CVSS 7.8) in Artifex Ghostscript, published January 23, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 41.6%, the 98th percentile. Fixed in ghostscript 9.26-r2.
References
access.redhat.com/errata/RHSA-2019:0229
securityfocus.com/bid/106700
usn.ubuntu.com/3866-1
exploit-db.com/exploits/46242
lists.debian.org/debian-lts-announce/2019/02/msg00016.html
packetstormsecurity.com/files/151307/Ghostscript-Pseudo-Operator-Remote-Code-Execution.html
Show 104 moreShow less
debian.org/security/2019/dsa-4372
bugs.chromium.org/p/project-zero/issues/detail?id=1729
lists.opensuse.org/opensuse-security-announce/2019-01/msg00047.html
openwall.com/lists/oss-security/2019/01/23/5
bugs.ghostscript.com/show_bug.cgi?id=700317
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MWVAVCDXBLPLJMVGNSKGGDTBEOHCJBKK
seclists.org/bugtraq/2019/Apr/4
security.gentoo.org/glsa/202004-03
nvd.nist.gov/vuln/detail/CVE-2019-6116
github.com/advisories/GHSA-6vrc-h32p-948x
security.alpinelinux.org/vuln/CVE-2019-6116
docs.bell-sw.com/security/cves/CVE-2019-6116
security-tracker.debian.org/tracker/CVE-2019-6116
advisories.mageia.org/MGASA-2019-0056.html
bugs.mageia.org/show_bug.cgi?id=24233
bugzilla.redhat.com/show_bug.cgi?id=1625843
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0229.json
cve.org/CVERecord?id=CVE-2018-16540
artifex.com/news/ghostscript-security-resolved
kb.cert.org/vuls/id/332928
blog.semmle.com/ghostscript-CVE-2018-19475
suse.com/support/update/announcement/2019/suse-su-20190144-1
bugzilla.suse.com/1122319
ubuntu.com/security/CVE-2019-6116
This page doesn't list everything
Left out here: 6 versions. The JSON record has them.