ISOMAN

CVE

CVE-2018-15909

In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b
  2. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6
  3. http://www.securityfocus.com/bid/105178
  4. https://access.redhat.com/errata/RHSA-2018:3650
  5. https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
  6. https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
  7. https://security.gentoo.org/glsa/201811-12
  8. https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS
  9. https://usn.ubuntu.com/3768-1/
  10. https://www.kb.cert.org/vuls/id/332928
  11. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b
  12. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6
  13. http://www.securityfocus.com/bid/105178
  14. https://access.redhat.com/errata/RHSA-2018:3650
  15. https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
  16. https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
  17. https://security.gentoo.org/glsa/201811-12
  18. https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS
  19. https://usn.ubuntu.com/3768-1/
  20. https://www.kb.cert.org/vuls/id/332928