Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c87p-jj8p-c38g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A flaw was found in all versions of ghostscript 9.x before 9.28, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.

A flaw was found in all versions of ghostscript 9.x before 9.28, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.

EPSS

Процентиль: 50%
0.0027
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 6 лет назад

A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.

CVSS3: 7.3
redhat
около 6 лет назад

A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.

CVSS3: 8.8
nvd
около 6 лет назад

A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.

CVSS3: 8.8
debian
около 6 лет назад

A flaw was found in all versions of ghostscript 9.x before 9.50, where ...

suse-cvrf
около 6 лет назад

Security update for ghostscript

EPSS

Процентиль: 50%
0.0027
Низкий