CVE-2019-3835
It was found that the superexec operator was available in the internal dictionary in ghostscript...
7.3 HighFix available
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
2.47%Down 1.0 points since Apr 14, 2021
What each source reports
CVE List Score used
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
- Record
CVE-2019-3835- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-648
- Updated
- 2026-11-02
EUVDEUVD-2019-13455
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
- Record
EUVD-2019-13455- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-22vx-j9g4-5q8f
It was found that the superexec operator was available in the internal dictionary in ghostscript...
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
- Record
GHSA-22vx-j9g4-5q8f- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Weakness
- CWE-862
- Updated
- 2026-11-02
NVD
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
- Record
CVE-2019-3835- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-648, CWE-862
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-3835
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
- Record
ALPINE-CVE-2019-3835- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
OSVBELL-CVE-2019-3835
CVE-2019-3835 does not affect BellSoft software
- Record
BELL-CVE-2019-3835- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 12 moreShow less
OSV
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
- Record
CVE-2019-3835- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-3835
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
- Record
DEBIAN-CVE-2019-3835- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2019:0633
Red Hat Security Advisory: ghostscript security and bug fix update
- Record
RHSA-2019:0633- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2019:0971
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2019:0971- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-3835
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
- Record
UBUNTU-CVE-2019-3835- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2019-0130 No score
Updated ghostscript packages fix security vulnerability
It was found that the superexec operator was available in the internal dictionary. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. (CVE-2019-3835)
It was found that the forceput operator could be extracted from the DefineResource method using methods similar to the ones described in CVE-2019-6116. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constraints imposed by -dSAFER. (CVE-2019-3838)
- Record
MGASA-2019-0130- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2222-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
Security issues fixed:
- CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. (bsc#1129180)
- CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators. (bsc#1134156)
- CVE-2019-12973: Fixed a denial-of-service vulnerability in the OpenJPEG function opj_t1_encode_cblks. (bsc#1140359)
- CVE-2019-14811: Fixed a safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator. (bsc#1146882)
- CVE-2019-14812: Fixed a safer mode bypass by .forceput exposure in setuserparams. (bsc#1146882)
- CVE-2019-14813: Fixed a safer mode bypass by .forceput exposure in setsystemparams. (bsc#1146882)
- CVE-2019-14817: Fixed a safer mode bypass by .forceput exposure in .pdfexectoken and other procedures. (bsc#1146884)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2222-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2223-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
Security issues fixed:
- CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. (bsc#1129180)
- CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators. (bsc#1134156)
- CVE-2019-12973: Fixed a denial-of-service vulnerability in the OpenJPEG function opj_t1_encode_cblks. (bsc#1140359)
- CVE-2019-14811: Fixed a safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator. (bsc#1146882)
- CVE-2019-14812: Fixed a safer mode bypass by .forceput exposure in setuserparams. (bsc#1146882)
- CVE-2019-14813: Fixed a safer mode bypass by .forceput exposure in setsystemparams. (bsc#1146882)
- CVE-2019-14817: Fixed a safer mode bypass by .forceput exposure in .pdfexectoken and other procedures. (bsc#1146884)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2223-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10783-1 No score
ghostscript-9.54.0-2.2 on GA media
These are all security issues fixed in the ghostscript-9.54.0-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10783-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2460-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
Security issues fixed:
- CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. (bsc#1129180)
- CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators. (bsc#1134156)
- CVE-2019-12973: Fixed a denial-of-service vulnerability in the OpenJPEG function opj_t1_encode_cblks. (bsc#1140359)
- CVE-2019-14811: Fixed a safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator. (bsc#1146882)
- CVE-2019-14812: Fixed a safer mode bypass by .forceput exposure in setuserparams. (bsc#1146882)
- CVE-2019-14813: Fixed a safer mode bypass by .forceput exposure in setsystemparams. (bsc#1146882)
- CVE-2019-14817: Fixed a safer mode bypass by .forceput exposure in .pdfexectoken and other procedures. (bsc#1146884)
- Record
SUSE-SU-2019:2460-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2478-1 No score
Security update for ghostscript
This update for ghostscript to 9.27 fixes the following issues:
Security issues fixed:
- CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. (bsc#1129180)
- CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators. (bsc#1134156)
- CVE-2019-12973: Fixed a denial-of-service vulnerability in the OpenJPEG function opj_t1_encode_cblks. (bsc#1140359)
- CVE-2019-14811: Fixed a safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator. (bsc#1146882)
- CVE-2019-14812: Fixed a safer mode bypass by .forceput exposure in setuserparams. (bsc#1146882)
- CVE-2019-14813: Fixed a safer mode bypass by .forceput exposure in setsystemparams. (bsc#1146882)
- CVE-2019-14817: Fixed a safer mode bypass by .forceput exposure in .pdfexectoken and other procedures. (bsc#1146884)
- Record
SUSE-SU-2019:2478-1- Updated
- 2026-11-02
OSVUSN-3915-1 No score
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service.
- Record
USN-3915-1- Updated
- 2026-11-02
Affected products
- artifex ghostscript
- the ghostscript project ghostscript
- debian linux
- fedoraproject fedora
- opensuse leap
- redhat ansible tower
- redhat enterprise linux desktop
- redhat enterprise linux server
- redhat enterprise linux server aus
- redhat enterprise linux server eus
- redhat enterprise linux server tus
- redhat enterprise linux workstation
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.10 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.11 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.12 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.13 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.14 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.15 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.16 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.17 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.18 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.19 |
before 9.26-r2 | 9.26-r2 |
Show 91 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.20 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.21 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.22 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.23 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.24 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.6 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.7 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.8 |
before 9.26-r2 | 9.26-r2 |
ghostscriptAlpine:v3.9 |
before 9.26-r2 | 9.26-r2 |
ghostscriptDebian:12 |
before 9.27~dfsg-1 | 9.27~dfsg-1 |
ghostscriptDebian:13 |
before 9.27~dfsg-1 | 9.27~dfsg-1 |
ghostscriptDebian:14 |
before 9.27~dfsg-1 | 9.27~dfsg-1 |
ghostscriptDebian:8 From an advisory covering 2 CVEs |
before 9.26a~dfsg-0+deb8u2, plus listed versions 9.06~dfsg-29.06~dfsg-2+deb8u19.06~dfsg-2+deb8u109.06~dfsg-2+deb8u119.06~dfsg-2+deb8u12 Show 45 moreShow less9.06~dfsg-2+deb8u139.06~dfsg-2+deb8u29.06~dfsg-2+deb8u39.06~dfsg-2+deb8u49.06~dfsg-2+deb8u59.06~dfsg-2+deb8u69.06~dfsg-2+deb8u79.06~dfsg-2+deb8u89.06~dfsg-2+deb8u99.10~dfsg-19.15~dfsg-19.15~rc1~dfsg-19.16~dfsg-19.16~dfsg-29.16~dfsg-2+sparc649.16~dfsg-2.19.16~dfsg-2.1+sparc649.18~dfsg-19.18~dfsg-29.18~dfsg-39.18~dfsg-49.19~dfsg-19.19~dfsg-29.19~dfsg-39.19~dfsg-3.19.19~~rc1~dfsg-19.20~dfsg-19.20~dfsg-1~exp19.20~dfsg-29.20~dfsg-39.20~dfsg-3.19.20~dfsg-3.29.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-3 |
9.26a~dfsg-0+deb8u2 |
ghostscriptDebian:9 From an advisory covering 2 CVEs |
before 9.26a~dfsg-0+deb9u2, plus listed versions 9.20~dfsg-3.29.20~dfsg-3.2+deb9u19.20~dfsg-3.2+deb9u29.20~dfsg-3.2+deb9u39.20~dfsg-3.2+deb9u4 Show 24 moreShow less9.20~dfsg-3.2+deb9u59.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-0+deb9u19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-39.25~dfsg-49.25~dfsg-59.25~dfsg-69.25~dfsg-79.26a~dfsg-0+deb9u19.26~dfsg-0+deb9u19.26~dfsg-0+deb9u29.26~dfsg-19.26~dfsg-2 |
9.26a~dfsg-0+deb9u2 |
ghostscriptMageia:6 From an advisory covering 2 CVEs |
before 9.26-1.3.mga6 | 9.26-1.3.mga6 |
ghostscriptRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-cupsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-docRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-gtkRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscriptRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-cupsRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-docRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-gtkRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscriptRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-cupsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-docRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-gtkRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscriptRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-cupsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-docRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscript-gtkRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:9.07-31.el7_6.10 | 0:9.07-31.el7_6.10 |
ghostscriptRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
libgsRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
libgs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-docRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-tools-dvipdfRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-tools-fontsRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-tools-printingRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-x11Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
libgs-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
libgs-develRed Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs |
before 0:9.25-2.el8_0.1 | 0:9.25-2.el8_0.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 7 CVEs |
before 9.27-3.21.1 | 9.27-3.21.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 7 CVEs |
before 9.27-3.21.1 | 9.27-3.21.1 |
ghostscriptSUSE:HPE Helion OpenStack 8 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:OpenStack Cloud 7 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:OpenStack Cloud 8 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Enterprise Storage 4 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptSUSE:Enterprise Storage 5 From an advisory covering 7 CVEs |
before 9.27-23.28.1 | 9.27-23.28.1 |
ghostscriptUbuntu:14.04:LTS |
before 9.26~dfsg+0-0ubuntu0.14.04.8, plus listed versions 9.10~dfsg-0ubuntu29.10~dfsg-0ubuntu39.10~dfsg-0ubuntu49.10~dfsg-0ubuntu59.10~dfsg-0ubuntu6 Show 24 moreShow less9.10~dfsg-0ubuntu79.10~dfsg-0ubuntu89.10~dfsg-0ubuntu99.10~dfsg-0ubuntu109.10~dfsg-0ubuntu10.19.10~dfsg-0ubuntu10.29.10~dfsg-0ubuntu10.39.10~dfsg-0ubuntu10.49.10~dfsg-0ubuntu10.59.10~dfsg-0ubuntu10.69.10~dfsg-0ubuntu10.79.10~dfsg-0ubuntu10.99.10~dfsg-0ubuntu10.109.10~dfsg-0ubuntu10.129.10~dfsg-0ubuntu10.139.25~dfsg+1-0ubuntu0.14.04.19.25~dfsg+1-0ubuntu0.14.04.29.25~dfsg+1-0ubuntu0.14.04.39.26~dfsg+0-0ubuntu0.14.04.19.26~dfsg+0-0ubuntu0.14.04.39.26~dfsg+0-0ubuntu0.14.04.49.26~dfsg+0-0ubuntu0.14.04.59.26~dfsg+0-0ubuntu0.14.04.69.26~dfsg+0-0ubuntu0.14.04.7 |
9.26~dfsg+0-0ubuntu0.14.04.8 |
ghostscriptUbuntu:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.8, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 15 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.7 |
9.26~dfsg+0-0ubuntu0.16.04.8 |
ghostscriptUbuntu:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.8, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 7 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.7 |
9.26~dfsg+0-0ubuntu0.18.04.8 |
ghostscriptUbuntu:14.04:LTS From an advisory covering 2 CVEs |
before 9.26~dfsg+0-0ubuntu0.14.04.8, plus listed versions 9.10~dfsg-0ubuntu29.10~dfsg-0ubuntu39.10~dfsg-0ubuntu49.10~dfsg-0ubuntu59.10~dfsg-0ubuntu6 Show 24 moreShow less9.10~dfsg-0ubuntu79.10~dfsg-0ubuntu89.10~dfsg-0ubuntu99.10~dfsg-0ubuntu109.10~dfsg-0ubuntu10.19.10~dfsg-0ubuntu10.29.10~dfsg-0ubuntu10.39.10~dfsg-0ubuntu10.49.10~dfsg-0ubuntu10.59.10~dfsg-0ubuntu10.69.10~dfsg-0ubuntu10.79.10~dfsg-0ubuntu10.99.10~dfsg-0ubuntu10.109.10~dfsg-0ubuntu10.129.10~dfsg-0ubuntu10.139.25~dfsg+1-0ubuntu0.14.04.19.25~dfsg+1-0ubuntu0.14.04.29.25~dfsg+1-0ubuntu0.14.04.39.26~dfsg+0-0ubuntu0.14.04.19.26~dfsg+0-0ubuntu0.14.04.39.26~dfsg+0-0ubuntu0.14.04.49.26~dfsg+0-0ubuntu0.14.04.59.26~dfsg+0-0ubuntu0.14.04.69.26~dfsg+0-0ubuntu0.14.04.7 |
9.26~dfsg+0-0ubuntu0.14.04.8 |
ghostscriptUbuntu:16.04:LTS From an advisory covering 2 CVEs |
before 9.26~dfsg+0-0ubuntu0.16.04.8, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 15 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.7 |
9.26~dfsg+0-0ubuntu0.16.04.8 |
ghostscriptUbuntu:18.04:LTS From an advisory covering 2 CVEs |
before 9.26~dfsg+0-0ubuntu0.18.04.8, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 7 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.7 |
9.26~dfsg+0-0ubuntu0.18.04.8 |
ghostscriptopenSUSE:Leap 15.0 From an advisory covering 7 CVEs |
before 9.27-lp150.2.23.1 | 9.27-lp150.2.23.1 |
ghostscript-miniopenSUSE:Leap 15.0 From an advisory covering 7 CVEs |
before 9.27-lp150.2.23.1 | 9.27-lp150.2.23.1 |
ghostscriptopenSUSE:Leap 15.1 From an advisory covering 7 CVEs |
before 9.27-lp151.3.6.1 | 9.27-lp151.3.6.1 |
ghostscript-miniopenSUSE:Leap 15.1 From an advisory covering 7 CVEs |
before 9.27-lp151.3.6.1 | 9.27-lp151.3.6.1 |
ghostscriptopenSUSE:Tumbleweed From an advisory covering 44 CVEs |
before 9.54.0-2.2 | 9.54.0-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-3835 is a high vulnerability (CVSS 7.3) in Artifex Ghostscript, published March 21, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.47%, the 84th percentile. Fixed in ghostscript 9.26-r2.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3835
bugs.ghostscript.com/show_bug.cgi?id=700585
access.redhat.com/errata/RHSA-2019:0652
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVERLGEU3OV6RNZ2SIBXREWD3BF5H23N
seclists.org/bugtraq/2019/Apr/4
Show 98 moreShow less
packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.html
debian.org/security/2019/dsa-4432
securityfocus.com/bid/107855
lists.debian.org/debian-lts-announce/2019/04/msg00021.html
lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html
security.gentoo.org/glsa/202004-03
nvd.nist.gov/vuln/detail/CVE-2019-3835
github.com/advisories/GHSA-22vx-j9g4-5q8f
security.alpinelinux.org/vuln/CVE-2019-3835
docs.bell-sw.com/security/cves/CVE-2019-3835
security-tracker.debian.org/tracker/CVE-2019-3835
advisories.mageia.org/MGASA-2019-0130.html
bugs.mageia.org/show_bug.cgi?id=24548
openwall.com/lists/oss-security/2019/03/21/1
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0633.json
cve.org/CVERecord?id=CVE-2019-3835
suse.com/support/update/announcement/2019/suse-su-20192460-1
bugzilla.suse.com/1129180
ubuntu.com/security/CVE-2019-3835
This page doesn't list everything
Left out here: 7 versions. The JSON record has them.