ISOMAN

CVE

CVE-2018-18073

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.

Severity
MEDIUM
CVSS
6.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=34cc326eb2c5695833361887fe0b32e8d987741c
  2. http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.html
  3. http://www.openwall.com/lists/oss-security/2018/10/10/12
  4. https://access.redhat.com/errata/RHSA-2018:3834
  5. https://bugs.chromium.org/p/project-zero/issues/detail?id=1690
  6. https://bugs.ghostscript.com/show_bug.cgi?id=699927
  7. https://lists.debian.org/debian-lts-announce/2018/10/msg00013.html
  8. https://usn.ubuntu.com/3803-1/
  9. https://www.debian.org/security/2018/dsa-4336
  10. http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=34cc326eb2c5695833361887fe0b32e8d987741c
  11. http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.html
  12. http://www.openwall.com/lists/oss-security/2018/10/10/12
  13. https://access.redhat.com/errata/RHSA-2018:3834
  14. https://bugs.chromium.org/p/project-zero/issues/detail?id=1690
  15. https://bugs.ghostscript.com/show_bug.cgi?id=699927
  16. https://lists.debian.org/debian-lts-announce/2018/10/msg00013.html
  17. https://usn.ubuntu.com/3803-1/
  18. https://www.debian.org/security/2018/dsa-4336