Summary
Tavis Ormandy discovered multiple security issues in Ghostscript. If a user
or automated system were tricked into processing a specially crafted file,
a remote attacker could possibly use these issues to access arbitrary
files, execute arbitrary code, or cause a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | ghostscript | 9.25~dfsg+1-0ubuntu0.14.04.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | ghostscript | 9.25~dfsg+1-0ubuntu0.16.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | ghostscript | 9.25~dfsg+1-0ubuntu0.18.04.2 |
Vulnerabilities 3
-
Unscored —CVE-2018-17961 Public exploit
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving er…
-
Unscored —
Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operator…
-
Unscored —CVE-2018-18284 EPSS 16%
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving th…