CVE-2019-10216
It was found that the .buildfont1 procedure did not properly secure its privileged calls,...
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
7.3
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
- Record
CVE-2019-10216- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-648
- Updated
- 2026-11-02
EUVDEUVD-2019-2231
7.3
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
- Record
EUVD-2019-2231- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9xw2-pr37-vhp5
7.8
It was found that the .buildfont1 procedure did not properly secure its privileged calls,...
It was found that the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
- Record
GHSA-9xw2-pr37-vhp5- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-648
- Updated
- 2026-11-02
NVD
7.8
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
- Record
CVE-2019-10216- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-648
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-10216
7.8
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
- Record
ALPINE-CVE-2019-10216- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2019-10216
7.8
CVE-2019-10216 does not affect BellSoft software
- Record
BELL-CVE-2019-10216- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 12 moreShow less
OSV
7.8
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
- Record
CVE-2019-10216- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-10216
7.8
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
- Record
DEBIAN-CVE-2019-10216- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:2462
7.3
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2019:2462- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2019:2465
7.3
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2019:2465- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-10216
7.8
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
- Record
UBUNTU-CVE-2019-10216- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVMGASA-2019-0236 No score
Updated ghostscript packages fix security vulnerability
Updated ghostscript packages fix security vulnerability:
It was found that the .buildfont1 procedure did not properly secure its
privileged calls, enabling scripts to bypass -dSAFER restrictions. An
attacker could abuse this flaw by creating a specially crafted PostScript
file that could escalate privileges and access files outside of restricted
areas (CVE-2019-10216).
Also, the Mageia 7 update fixes a bounding box issue that affects klatexformula (mga#24866).
- Record
MGASA-2019-0236- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2139-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
Security issue fixed:
- CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2139-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2160-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
Security issue fixed:
- CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2160-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10783-1 No score
ghostscript-9.54.0-2.2 on GA media
These are all security issues fixed in the ghostscript-9.54.0-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10783-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2347-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
Security issue fixed:
- CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621).
- Record
SUSE-SU-2019:2347-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2348-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
Security issue fixed:
- CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621).
- Record
SUSE-SU-2019:2348-1- Updated
- 2026-11-02
OSVUSN-4092-1 No score
ghostscript vulnerability
Netanel Fisher discovered that the font handler in Ghostscript did not properly restrict privileged calls when '-dSAFER' restrictions were in effect. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files.
- Record
USN-4092-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.10 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.11 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.12 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.13 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.14 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.15 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.16 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.17 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.18 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.19 |
before 9.27-r2 | 9.27-r2 |
Show 74 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.20 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.21 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.22 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.23 |
before 9.27-r2 | 9.27-r2 |
ghostscriptAlpine:v3.7 |
before 9.26-r3 | 9.26-r3 |
ghostscriptAlpine:v3.8 |
before 9.26-r3 | 9.26-r3 |
ghostscriptAlpine:v3.9 |
before 9.26-r3 | 9.26-r3 |
ghostscriptDebian:12 |
before 9.27~dfsg-3.1 | 9.27~dfsg-3.1 |
ghostscriptDebian:13 |
before 9.27~dfsg-3.1 | 9.27~dfsg-3.1 |
ghostscriptDebian:14 |
before 9.27~dfsg-3.1 | 9.27~dfsg-3.1 |
ghostscriptDebian:8 |
before 9.26a~dfsg-0+deb8u4, plus listed versions 9.06~dfsg-29.06~dfsg-2+deb8u19.06~dfsg-2+deb8u109.06~dfsg-2+deb8u119.06~dfsg-2+deb8u12 Show 45 moreShow less9.06~dfsg-2+deb8u139.06~dfsg-2+deb8u29.06~dfsg-2+deb8u39.06~dfsg-2+deb8u49.06~dfsg-2+deb8u59.06~dfsg-2+deb8u69.06~dfsg-2+deb8u79.06~dfsg-2+deb8u89.06~dfsg-2+deb8u99.10~dfsg-19.15~dfsg-19.15~rc1~dfsg-19.16~dfsg-19.16~dfsg-29.16~dfsg-2+sparc649.16~dfsg-2.19.16~dfsg-2.1+sparc649.18~dfsg-19.18~dfsg-29.18~dfsg-39.18~dfsg-49.19~dfsg-19.19~dfsg-29.19~dfsg-39.19~dfsg-3.19.19~~rc1~dfsg-19.20~dfsg-19.20~dfsg-1~exp19.20~dfsg-29.20~dfsg-39.20~dfsg-3.19.20~dfsg-3.29.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-3 |
9.26a~dfsg-0+deb8u4 |
ghostscriptDebian:9 |
before 9.26a~dfsg-0+deb9u4, plus listed versions 9.20~dfsg-3.29.20~dfsg-3.2+deb9u19.20~dfsg-3.2+deb9u29.20~dfsg-3.2+deb9u39.20~dfsg-3.2+deb9u4 Show 26 moreShow less9.20~dfsg-3.2+deb9u59.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-0+deb9u19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-39.25~dfsg-49.25~dfsg-59.25~dfsg-69.25~dfsg-79.26a~dfsg-0+deb9u19.26a~dfsg-0+deb9u29.26a~dfsg-0+deb9u39.26~dfsg-0+deb9u19.26~dfsg-0+deb9u29.26~dfsg-19.26~dfsg-2 |
9.26a~dfsg-0+deb9u4 |
ghostscriptDebian:10 |
before 9.27~dfsg-2+deb10u1, plus listed versions 9.27~dfsg-2 |
9.27~dfsg-2+deb10u1 |
ghostscriptMageia:6 |
before 9.26-1.5.mga6 | 9.26-1.5.mga6 |
ghostscriptMageia:7 |
before 9.27-1.2.mga7 | 9.27-1.2.mga7 |
ghostscriptRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-cupsRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
libgsRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-docRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-gtkRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
libgs-develRed Hat:enterprise_linux:7::client |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscriptRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-cupsRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
libgsRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-docRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-gtkRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
libgs-develRed Hat:enterprise_linux:7::computenode |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscriptRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-cupsRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
libgsRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-docRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-gtkRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
libgs-develRed Hat:enterprise_linux:7::server |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscriptRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-cupsRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
libgsRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-docRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscript-gtkRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
libgs-develRed Hat:enterprise_linux:7::workstation |
before 0:9.25-2.el7_7.1 | 0:9.25-2.el7_7.1 |
ghostscriptRed Hat:enterprise_linux:8::appstream |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
libgsRed Hat:enterprise_linux:8::appstream |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
libgs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-docRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-tools-dvipdfRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-tools-fontsRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-tools-printingRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-x11Red Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
libgs-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
libgs-develRed Hat:enterprise_linux:8::crb |
before 0:9.25-2.el8_0.2 | 0:9.25-2.el8_0.2 |
ghostscriptSUSE:Linux Enterprise Desktop 12 SP4 |
before 9.26a-23.25.1 | 9.26a-23.25.1 |
ghostscriptSUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 9.26a-23.25.1 | 9.26a-23.25.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP4 |
before 9.26a-23.25.1 | 9.26a-23.25.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 9.26a-23.25.1 | 9.26a-23.25.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 |
before 9.26a-3.18.2 | 9.26a-3.18.2 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 9.26a-3.18.2 | 9.26a-3.18.2 |
ghostscriptUbuntu:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.10, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 17 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.9 |
9.26~dfsg+0-0ubuntu0.16.04.10 |
ghostscriptUbuntu:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.10, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 9 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.9 |
9.26~dfsg+0-0ubuntu0.18.04.10 |
ghostscriptopenSUSE:Leap 15.1 |
before 9.26a-lp151.3.3.1 | 9.26a-lp151.3.3.1 |
ghostscript-miniopenSUSE:Leap 15.1 |
before 9.26a-lp151.3.3.1 | 9.26a-lp151.3.3.1 |
ghostscriptopenSUSE:Leap 15.0 |
before 9.26a-lp150.2.20.1 | 9.26a-lp150.2.20.1 |
ghostscript-miniopenSUSE:Leap 15.0 |
before 9.26a-lp150.2.20.1 | 9.26a-lp150.2.20.1 |
ghostscriptopenSUSE:Tumbleweed From an advisory covering 44 CVEs |
before 9.54.0-2.2 | 9.54.0-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-10216 is a high vulnerability (CVSS 7.3) in Artifex Ghostscript, published August 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. Fixed in ghostscript 9.27-r2.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10216
git.ghostscript.com?p=ghostpdl.git%3Ba=commitdiff%3Bh=5b85ddd19
security.gentoo.org/glsa/202004-03
nvd.nist.gov/vuln/detail/CVE-2019-10216
git.ghostscript.com?p=ghostpdl.git;a=commitdiff;h=5b85ddd19
github.com/advisories/GHSA-9xw2-pr37-vhp5
Show 66 moreShow less
security.alpinelinux.org/vuln/CVE-2019-10216
docs.bell-sw.com/security/cves/CVE-2019-10216
security-tracker.debian.org/tracker/CVE-2019-10216
advisories.mageia.org/MGASA-2019-0236.html
bugs.mageia.org/show_bug.cgi?id=25294
bugs.mageia.org/show_bug.cgi?id=24866
openwall.com/lists/oss-security/2019/08/12/4
access.redhat.com/errata/RHSA-2019:2462
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1737080
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2462.json
access.redhat.com/security/cve/CVE-2019-10216
cve.org/CVERecord?id=CVE-2019-10216
access.redhat.com/errata/RHSA-2019:2465
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2465.json
suse.com/support/update/announcement/2019/suse-su-20192347-1
bugzilla.suse.com/1144621
suse.com/security/cve/CVE-2019-10216
suse.com/support/update/announcement/2019/suse-su-20192348-1
ubuntu.com/security/CVE-2019-10216
ubuntu.com/security/notices/USN-4092-1
lists.opensuse.org/archives/list/[email protected]/thread/FW24DFNY77J4KEU5ORI5WO22DIZS5RJA
lists.opensuse.org/archives/list/[email protected]/thread/JPH6CBN4BXBRQTLEAQWN2VLL3HGGVVYV
suse.com/security/cve/CVE-2016-10217
suse.com/security/cve/CVE-2016-10218
suse.com/security/cve/CVE-2016-10219
suse.com/security/cve/CVE-2016-10220
suse.com/security/cve/CVE-2016-10317
suse.com/security/cve/CVE-2017-5951
suse.com/security/cve/CVE-2017-7207
suse.com/security/cve/CVE-2017-8291
suse.com/security/cve/CVE-2017-9216
suse.com/security/cve/CVE-2018-10194
suse.com/security/cve/CVE-2018-15908
suse.com/security/cve/CVE-2018-15909
suse.com/security/cve/CVE-2018-15910
suse.com/security/cve/CVE-2018-15911
suse.com/security/cve/CVE-2018-16509
suse.com/security/cve/CVE-2018-16510
suse.com/security/cve/CVE-2018-16511
suse.com/security/cve/CVE-2018-16513
suse.com/security/cve/CVE-2018-16539
suse.com/security/cve/CVE-2018-16540
suse.com/security/cve/CVE-2018-16541
suse.com/security/cve/CVE-2018-16542
suse.com/security/cve/CVE-2018-16543
suse.com/security/cve/CVE-2018-16585
suse.com/security/cve/CVE-2018-16802
suse.com/security/cve/CVE-2018-17183
suse.com/security/cve/CVE-2018-17961
suse.com/security/cve/CVE-2018-18073
suse.com/security/cve/CVE-2018-18284
suse.com/security/cve/CVE-2018-19409
suse.com/security/cve/CVE-2018-19475
suse.com/security/cve/CVE-2018-19476
suse.com/security/cve/CVE-2018-19477
suse.com/security/cve/CVE-2018-6616
suse.com/security/cve/CVE-2019-12973
suse.com/security/cve/CVE-2019-14811
suse.com/security/cve/CVE-2019-14817
suse.com/security/cve/CVE-2019-3835
suse.com/security/cve/CVE-2019-3838
suse.com/security/cve/CVE-2019-6116
suse.com/security/cve/CVE-2020-12268
suse.com/security/cve/CVE-2020-15900
suse.com/security/cve/CVE-2021-3781
Left out here: 9 versions. The JSON record has them.