CVEvulnerability
CVE-2018-16802
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.
Affected configurations
• artifex ghostscript (< 9.25)
• debian debian linux 8.0
• debian debian linux 9.0
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.6
• redhat enterprise linux server eus 7.6
• redhat enterprise linux server tus 7.6
• redhat enterprise linux workstation 7.0
References
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3e5d316b72e3965b7968bb1d96baa137cd063ac6 git.ghostscript.com
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=643b24dbd002fb9c131313253c307cf3951b3d47 git.ghostscript.com
- https://access.redhat.com/errata/RHSA-2018:3834 Third Party Advisory
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=5812b1b78fc4d36fdc293b7859de69241140d590 git.ghostscript.com
- https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html Mailing List, Third Party Advisory
- https://seclists.org/oss-sec/2018/q3/228 Mailing List, Third Party Advisory
- https://seclists.org/oss-sec/2018/q3/229 Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201811-12 Third Party Advisory
- https://usn.ubuntu.com/3768-1/ Third Party Advisory
- https://www.debian.org/security/2018/dsa-4294 Third Party Advisory
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3e5d316b72e3965b7968bb1d96baa137cd063ac6 git.ghostscript.com
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=643b24dbd002fb9c131313253c307cf3951b3d47 git.ghostscript.com
- https://access.redhat.com/errata/RHSA-2018:3834 Third Party Advisory
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=5812b1b78fc4d36fdc293b7859de69241140d590 git.ghostscript.com
- https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html Mailing List, Third Party Advisory
- https://seclists.org/oss-sec/2018/q3/228 Mailing List, Third Party Advisory
- https://seclists.org/oss-sec/2018/q3/229 Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201811-12 Third Party Advisory
- https://usn.ubuntu.com/3768-1/ Third Party Advisory
- https://www.debian.org/security/2018/dsa-4294 Third Party Advisory