Debian update for ghostscript

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU20059

Risk: Low

CVSSv4.0: 0.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-10216

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to access arbitrary files on the system.

The vulnerability exists due to an error within the .buildfont1 procedure when making privileged secure calls. A remote attacker can create a specially crafted PostScript file, trick the victim into opening it, bypass the ‘-dSAFER’ restrictions and access arbitrary file on the system.

Mitigation

Update ghostscript package to one of the following versions: 9.26a~dfsg-0+deb9u4, 9.27~dfsg-2+deb10u1.

Vulnerable software versions

ghostscript (Debian package): 9.20~dfsg-3.2+deb9u1 - 9.26a~dfsg-0+deb9u3

CPE2.3

• cpe:2.3:o:debian:ghostscript_debian_package:9.20~dfsg-3.2 deb9u1:*:*:*:*:debian_linux:*:*
• cpe:2.3:o:debian:ghostscript_debian_package:9.20~dfsg-3.2 deb9u2:*:*:*:*:debian_linux:*:*
• cpe:2.3:o:debian:ghostscript_debian_package:9.20~dfsg-3.2 deb9u3:*:*:*:*:debian_linux:*:*

External links

https://www.debian.org/security/2019/dsa-4499

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.