Permissions, Privileges, and Access Controls in ghostscript (Alpine package)

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU20059

Risk: Low

CVSSv3.1: 2.5 [CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2019-10216

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to access arbitrary files on the system.

The vulnerability exists due to an error within the .buildfont1 procedure when making privileged secure calls. A remote attacker can create a specially crafted PostScript file, trick the victim into opening it, bypass the ‘-dSAFER’ restrictions and access arbitrary file on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

ghostscript (Alpine package): 9.04-r0 - 9.26-r2

ghostscript (Alpine package):

External links

http://git.alpinelinux.org/aports/commit/?id=0c7e5ec71b97782eda0a281b09ddabdaba26f848
http://git.alpinelinux.org/aports/commit/?id=356973950eee8c184c404d8ef97eec75452d8d90
http://git.alpinelinux.org/aports/commit/?id=c84cb29b4169cd22777801ff1af201b4c2e730d9
http://git.alpinelinux.org/aports/commit/?id=572bfae1715027763d93986dca4f15179a78f8d6
http://git.alpinelinux.org/aports/commit/?id=ee8b04b44683cef9674d15880a2ff533d01e36b4

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.