ALINUX2-SA-2019%3A0027

ALINUX2-SA-2019%3A0027 PUBLISHED CVSS 7.300000190734863 HIGH

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-3839: It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable.

Risk Scores

CVSS 3.0

7.300000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products

Vendor	Product	Versions
Alibaba Cloud	ghostscript

Timeline

May 13, 2019 CVE Published
May 13, 2019 CVE Updated

References

ALINUX2-SA-2019:0027: ghostscript security update (Important) advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3839 advisory

Open in Interactive Console →