ISOMAN

CVE

CVE-2018-15911

In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=8e9ce5016db968b40e4ec255a3005f2786cce45f
  2. http://www.securityfocus.com/bid/105122
  3. https://access.redhat.com/errata/RHSA-2018:3834
  4. https://bugs.ghostscript.com/show_bug.cgi?id=699665
  5. https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
  6. https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
  7. https://security.gentoo.org/glsa/201811-12
  8. https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
  9. https://usn.ubuntu.com/3768-1/
  10. https://www.debian.org/security/2018/dsa-4288
  11. https://www.kb.cert.org/vuls/id/332928
  12. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=8e9ce5016db968b40e4ec255a3005f2786cce45f
  13. http://www.securityfocus.com/bid/105122
  14. https://access.redhat.com/errata/RHSA-2018:3834
  15. https://bugs.ghostscript.com/show_bug.cgi?id=699665
  16. https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
  17. https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
  18. https://security.gentoo.org/glsa/201811-12
  19. https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
  20. https://usn.ubuntu.com/3768-1/