漏洞信息详情
Artifex Software Ghostscript 权限许可和访问控制问题漏洞
- CNNVD编号:CNNVD-201908-2184
- 危害等级: 高危
- CVE编号: CVE-2019-14817
- 漏洞类型: 权限许可和访问控制问题
- 发布时间: 2019-08-28
- 威胁类型: 本地
- 更新时间: 2020-10-19
- 厂 商:
- 漏洞来源: Red Hat,Gentoo
漏洞简介
Artifex Software Ghostscript是美国Artifex Software公司的一款开源的PostScript(一种用于电子产业和桌面出版领域的页面描述语言和编程语言)解析器。该产品可显示Postscript文件以及在非Postscript打印机上打印Postscript文件。
Artifex Software Ghostscript 9.50之前版本中存在权限许可和访问控制问题漏洞。攻击者可借助特制的PostScript文件利用该漏洞访问文件系统或执行任意命令。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=cd1b1cacadac2479e291efe611979bdc1b3bdb19
参考网址
来源:bugzilla.redhat.com
链接:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14817
来源:git.ghostscript.com
链接:http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=cd1b1cacadac2479e291efe611979bdc1b3bdb19
来源:GENTOO
链接:https://security.gentoo.org/glsa/202004-03
来源:BUGTRAQ
链接:https://seclists.org/bugtraq/2019/Sep/15
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.HTML
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/6AATIHU32MYKUOXQDJQU4X4DDVL7NAY3/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/ZP34D27RKYV2POJ3NJLSVCHUA5V5C45A/
来源:DEBIAN
链接:https://www.debian.org/security/2019/dsa-4518
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.HTML
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/LBUC4DBBJTRFNCR3IODBV4IXB2C2HI3V/
来源:REDHAT
链接:https://access.redhat.com/errata/RHBA-2019:2824
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:2594
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2019/09/msg00007.HTML
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:2591
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:2586
来源:www.debian.org
链接:https://www.debian.org/security/2019/dsa-4518
来源:security-tracker.debian.org
链接:https://security-tracker.debian.org/tracker/DLA-1915-1
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4111-1/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3284/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3395/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3438/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3415/
来源:access.redhat.com
链接:https://access.redhat.com/security/cve/cve-2019-14817
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-14817
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/157059/Gentoo-Linux-Security-Advisory-202004-03.HTML
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/154299/Red-Hat-Security-Advisory-2019-2586-01.HTML
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3321/
受影响实体
暂无
补丁
- Artifex Software Ghostscript 安全漏洞的修复措施
评论