TI-2018-11841 CVE-2018-16509 · GHSA-98rm-3v6h-p8j6
An issue was discovered in Artifex Ghostscript before 9.24.
Priority HIGH 77
An issue was discovered in Artifex Ghostscript before 9.24.
RHSA-2018:2918
ghostscript security update
Released 2018-10-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ghostscript-9.07-29.el7_5.2, ghostscript-cups-9.07-29.el7_5.2
- Red Hat Enterprise Linux Client Optional (v. 7) ghostscript-devel-9.07-29.el7_5.2, ghostscript-doc-9.07-29.el7_5.2, ghostscript-gtk-9.07-29.el7_5.2
- Red Hat Enterprise Linux ComputeNode (v. 7) ghostscript-9.07-29.el7_5.2, ghostscript-cups-9.07-29.el7_5.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ghostscript-devel-9.07-29.el7_5.2, ghostscript-doc-9.07-29.el7_5.2, ghostscript-gtk-9.07-29.el7_5.2
- Red Hat Enterprise Linux Server (v. 7) ghostscript-9.07-29.el7_5.2, ghostscript-9.07-29.el7_5.2.ppc, ghostscript-cups-9.07-29.el7_5.2
- Red Hat Enterprise Linux Server Optional (v. 7) ghostscript-devel-9.07-29.el7_5.2, ghostscript-devel-9.07-29.el7_5.2.ppc, ghostscript-doc-9.07-29.el7_5.2 +1
- Red Hat Enterprise Linux Workstation (v. 7) ghostscript-9.07-29.el7_5.2, ghostscript-cups-9.07-29.el7_5.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) ghostscript-devel-9.07-29.el7_5.2, ghostscript-doc-9.07-29.el7_5.2, ghostscript-gtk-9.07-29.el7_5.2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ghostscript-9.07-29.el7_5.2, ghostscript-cups-9.07-29.el7_5.2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) ghostscript-devel-9.07-29.el7_5.2, ghostscript-doc-9.07-29.el7_5.2, ghostscript-gtk-9.07-29.el7_5.2
Fixes 4 records
TI-2018-11346 CVE-2018-15910 · GHSA-wx5g-j2w9-qx59
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files…
Priority MEDIUM 40
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or execute code.
TI-2018-07227 CVE-2018-10194 · GHSA-x8vv-69hx-8rmh
The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in…
Priority LOW 38
The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause…
TI-2018-11864 CVE-2018-16542 · GHSA-rpj7-rf55-hgch
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files…
Priority LOW 29
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.