ISOMAN

CVE

CVE-2018-16541

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter.

Severity
MEDIUM
CVSS
5.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=241d91112771a6104de10b3948c3f350d6690c1d
  2. https://access.redhat.com/errata/RHSA-2018:3834
  3. https://bugs.ghostscript.com/show_bug.cgi?id=699664
  4. https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
  5. https://security.gentoo.org/glsa/201811-12
  6. https://usn.ubuntu.com/3768-1/
  7. https://www.artifex.com/news/ghostscript-security-resolved/
  8. https://www.debian.org/security/2018/dsa-4288
  9. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=241d91112771a6104de10b3948c3f350d6690c1d
  10. https://access.redhat.com/errata/RHSA-2018:3834
  11. https://bugs.ghostscript.com/show_bug.cgi?id=699664
  12. https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
  13. https://security.gentoo.org/glsa/201811-12
  14. https://usn.ubuntu.com/3768-1/
  15. https://www.artifex.com/news/ghostscript-security-resolved/
  16. https://www.debian.org/security/2018/dsa-4288