Red Hat Security AdvisoryRHSA-2018:3834
ghostscript security and bug fix update
Released 2018-12-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ghostscript-9.07-31.el7_6.6, ghostscript-cups-9.07-31.el7_6.6
- Red Hat Enterprise Linux Client Optional (v. 7) ghostscript-devel-9.07-31.el7_6.6, ghostscript-doc-9.07-31.el7_6.6, ghostscript-gtk-9.07-31.el7_6.6
- Red Hat Enterprise Linux ComputeNode (v. 7) ghostscript-9.07-31.el7_6.6, ghostscript-cups-9.07-31.el7_6.6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ghostscript-devel-9.07-31.el7_6.6, ghostscript-doc-9.07-31.el7_6.6, ghostscript-gtk-9.07-31.el7_6.6
- Red Hat Enterprise Linux Server (v. 7) ghostscript-9.07-31.el7_6.6, ghostscript-9.07-31.el7_6.6.ppc, ghostscript-cups-9.07-31.el7_6.6
- Red Hat Enterprise Linux Server Optional (v. 7) ghostscript-devel-9.07-31.el7_6.6, ghostscript-devel-9.07-31.el7_6.6.ppc, ghostscript-doc-9.07-31.el7_6.6 +1
- Red Hat Enterprise Linux Workstation (v. 7) ghostscript-9.07-31.el7_6.6, ghostscript-cups-9.07-31.el7_6.6
- Red Hat Enterprise Linux Workstation Optional (v. 7) ghostscript-devel-9.07-31.el7_6.6, ghostscript-doc-9.07-31.el7_6.6, ghostscript-gtk-9.07-31.el7_6.6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ghostscript-9.07-31.el7_6.6, ghostscript-cups-9.07-31.el7_6.6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) ghostscript-devel-9.07-31.el7_6.6, ghostscript-doc-9.07-31.el7_6.6, ghostscript-gtk-9.07-31.el7_6.6
Fixes 9 records
Priority MEDIUM 54
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.
CVSS 3.0HIGH 8.6· Local · No auth · User interaction · EPSS 0.16288 · Published 2018-10-19 · Partial fix
Priority MEDIUM 53
An issue was discovered in Artifex Ghostscript before 9.26.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07825 · Published 2018-11-21 · Partial fix
Priority MEDIUM 50
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup.
CVSS 3.0HIGH 8.6· Local · No auth · User interaction · EPSS 0.0998 · Published 2018-10-15 · Partial fix CWE-209
Priority MEDIUM 40
In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02998 · Published 2018-08-28 · Partial fix CWE-908
Priority LOW 39
In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02873 · Published 2018-12-20 · Partial fix CWE-704
Priority LOW 38
Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01829 · Published 2018-09-19 · Partial fix
Priority LOW 38
An issue was discovered in Artifex Ghostscript before 9.25.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02086 · Published 2018-09-10 · Fixed
Priority LOW 33
Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.
CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.0273 · Published 2018-10-15 · Partial fix CWE-200
Priority LOW 28
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01424 · Published 2018-09-05 · Partial fix CWE-416
THREATIST.IORead the docs