CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14813

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.14

EPSS Ranking 93.9%

CVSS Severity

CVSS v3 Score 7.3

CVSS v2 Score 7.5

References

Products affected by CVE-2019-14813

Artifex » Ghostscript » Version: 9.00

cpe:2.3:a:artifex:ghostscript:9.00
Artifex » Ghostscript » Version: 9.01

cpe:2.3:a:artifex:ghostscript:9.01
Artifex » Ghostscript » Version: 9.02

cpe:2.3:a:artifex:ghostscript:9.02
Artifex » Ghostscript » Version: 9.04

cpe:2.3:a:artifex:ghostscript:9.04
Artifex » Ghostscript » Version: 9.05

cpe:2.3:a:artifex:ghostscript:9.05
Artifex » Ghostscript » Version: 9.06

cpe:2.3:a:artifex:ghostscript:9.06
Artifex » Ghostscript » Version: 9.07

cpe:2.3:a:artifex:ghostscript:9.07
Artifex » Ghostscript » Version: 9.09

cpe:2.3:a:artifex:ghostscript:9.09
Artifex » Ghostscript » Version: 9.10

cpe:2.3:a:artifex:ghostscript:9.10
Artifex » Ghostscript » Version: 9.14

cpe:2.3:a:artifex:ghostscript:9.14
Artifex » Ghostscript » Version: 9.15

cpe:2.3:a:artifex:ghostscript:9.15
Artifex » Ghostscript » Version: 9.16

cpe:2.3:a:artifex:ghostscript:9.16
Artifex » Ghostscript » Version: 9.18

cpe:2.3:a:artifex:ghostscript:9.18
Artifex » Ghostscript » Version: 9.19

cpe:2.3:a:artifex:ghostscript:9.19
Artifex » Ghostscript » Version: 9.20

cpe:2.3:a:artifex:ghostscript:9.20
Artifex » Ghostscript » Version: 9.21

cpe:2.3:a:artifex:ghostscript:9.21
Artifex » Ghostscript » Version: 9.22

cpe:2.3:a:artifex:ghostscript:9.22
Artifex » Ghostscript » Version: 9.23

cpe:2.3:a:artifex:ghostscript:9.23
Artifex » Ghostscript » Version: 9.24

cpe:2.3:a:artifex:ghostscript:9.24
Artifex » Ghostscript » Version: 9.25

cpe:2.3:a:artifex:ghostscript:9.25
Artifex » Ghostscript » Version: 9.26

cpe:2.3:a:artifex:ghostscript:9.26
Artifex » Ghostscript » Version: 9.27

cpe:2.3:a:artifex:ghostscript:9.27
Artifex » Ghostscript » Version: 9.28

cpe:2.3:a:artifex:ghostscript:9.28
Artifex » Ghostscript » Version: 9.50

cpe:2.3:a:artifex:ghostscript:9.50
Redhat » Openshift Container Platform » Version: 3.11

cpe:2.3:a:redhat:openshift_container_platform:3.11
Redhat » Openshift Container Platform » Version: 4.1

cpe:2.3:a:redhat:openshift_container_platform:4.1
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Opensuse » Leap » Version: 15.0

cpe:2.3:o:opensuse:leap:15.0
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14813

Products

Pricing

Contact Us