Published: 27/08/2018 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

In Artifex Ghostscript prior to 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or execute code.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 8.0
debian debian linux 9.0
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
canonical ubuntu linux 18.04
artifex ghostscript
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
redhat enterprise linux server eus 7.5
artifex gpl ghostscript
pulsesecure pulse connect secure

Synopsis Important: ghostscript security update Type/Severity Security Advisory: Important Topic An update for ghostscript is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...

Debian Bug report logs - #907332 ghostscript has a new code execution issue, even when used with -dSAFER Package: ghostscript; Maintainer for ghostscript is Debian Printing Team <debian-printing@listsdebianorg>; Source for ghostscript is src:ghostscript (PTS, buildd, popcon) Reported by: Nicolas Braud-Santoni <nicoo@deb ...

Several security issues were fixed in Ghostscript ...

It was discovered that the ghostscript shfill operator did not properly validate certain types An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or, possibly, execute arbitrary code in the ghostscript context via a specially crafted PostScript document(CVE-2018-15909) An issue was discovered in Artife ...

It was discovered that the type of the LockDistillerParams parameter is not properly verified An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or, possibly, execute arbitrary code in the ghostscript context via a specially crafted PostScript document ...

CWE-704 https://www.kb.cert.org/vuls/id/332928 https://bugs.ghostscript.com/show_bug.cgi?id=699656 https://www.debian.org/security/2018/dsa-4288 https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html https://usn.ubuntu.com/3768-1/https://access.redhat.com/errata/RHSA-2018:2918 http://www.securityfocus.com/bid/105122 https://security.gentoo.org/glsa/201811-12 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c3476dde7743761a4e1d39a631716199b696b880 https://support.f5.com/csp/article/K22141757?utm_source=f5support&%3Butm_medium=RSS https://access.redhat.com/errata/RHSA-2018:2918 https://nvd.nist.gov https://usn.ubuntu.com/3768-1/

CVE-2018-15910

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect