Summary
Tavis Ormandy discovered multiple security issues in Ghostscript. If a user
or automated system were tricked into processing a specially crafted file,
a remote attacker could possibly use these issues to access arbitrary
files, execute arbitrary code, or cause a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | ghostscript | 9.10~dfsg-0ubuntu10.13 |
| Ubuntu · 16.04 LTS 16.04:LTS | ghostscript | 9.18~dfsg~0-0ubuntu2.9 |
| Ubuntu · 18.04 LTS 18.04:LTS | ghostscript | 9.22~dfsg+1-0ubuntu1.2 |
Vulnerabilities 16
-
Unscored —
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempf…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers a…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memo…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handli…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF prim…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attacke…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checki…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter co…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interprete…
-
Unscored —
In Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have an unspecified impact.
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even t…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running …
References
-
report
https://ubuntu.com/security/CVE-2018-11645
-
report
https://ubuntu.com/security/CVE-2018-15908
-
report
https://ubuntu.com/security/CVE-2018-15909
-
report
https://ubuntu.com/security/CVE-2018-15910
-
report
https://ubuntu.com/security/CVE-2018-15911
-
report
https://ubuntu.com/security/CVE-2018-16509
-
report
https://ubuntu.com/security/CVE-2018-16510
-
report
https://ubuntu.com/security/CVE-2018-16511
-
report
https://ubuntu.com/security/CVE-2018-16513
-
report
https://ubuntu.com/security/CVE-2018-16539
-
report
https://ubuntu.com/security/CVE-2018-16540
-
report
https://ubuntu.com/security/CVE-2018-16541
-
report
https://ubuntu.com/security/CVE-2018-16542
-
report
https://ubuntu.com/security/CVE-2018-16543
-
report
https://ubuntu.com/security/CVE-2018-16585
-
report
https://ubuntu.com/security/CVE-2018-16802