CVEvulnerability
CVE-2018-16539
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable.
Affected configurations
• artifex ghostscript (< 9.24)
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• debian debian linux 8.0
• debian debian linux 9.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.6
• redhat enterprise linux server eus 7.6
• redhat enterprise linux server tus 7.6
• redhat enterprise linux workstation 7.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=a054156d425b4dbdaaa9fda4b5f1182b27598c2b git.ghostscript.com
- https://access.redhat.com/errata/RHSA-2018:3650 Third Party Advisory
- https://bugs.ghostscript.com/show_bug.cgi?id=699658 Issue Tracking, Permissions Required, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201811-12 Third Party Advisory
- https://usn.ubuntu.com/3768-1/ Third Party Advisory
- https://www.artifex.com/news/ghostscript-security-resolved/ Patch, Vendor Advisory
- https://www.debian.org/security/2018/dsa-4288 Third Party Advisory
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=a054156d425b4dbdaaa9fda4b5f1182b27598c2b git.ghostscript.com
- https://access.redhat.com/errata/RHSA-2018:3650 Third Party Advisory
- https://bugs.ghostscript.com/show_bug.cgi?id=699658 Issue Tracking, Permissions Required, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201811-12 Third Party Advisory
- https://usn.ubuntu.com/3768-1/ Third Party Advisory
- https://www.artifex.com/news/ghostscript-security-resolved/ Patch, Vendor Advisory
- https://www.debian.org/security/2018/dsa-4288 Third Party Advisory