CVE-2018-16509
Description
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect restoration of privilege checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the pipe instruction.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
91.758
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in Ghostscript 9.23 | Windows |
| ghostscript security update(DSA-4294-1) ghostscript_9.20~dfsg-3.2+deb9u5_i386.deb | Linux |
| ghostscript security update(DSA-4294-1) ghostscript_9.20~dfsg-3.2+deb9u5_amd64.deb | Linux |
| Ghostscript security update (CESA-2017:1230) ghostscript-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript security update (CESA-2017:1230) ghostscript-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2017:1230) ghostscript-doc-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript security update (CESA-2017:1230) ghostscript-doc-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2017:1230) ghostscript-gtk-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript security update (CESA-2017:1230) ghostscript-gtk-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2017:1230) ghostscript-devel-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript security update (CESA-2017:1230) ghostscript-devel-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:2918) ghostscript-9.07-31.el7_6.3.i686.rpm | Linux |
| Ghostscript security update (CESA-2018:2918) ghostscript-9.07-31.el7_6.3.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:2918) ghostscript-doc-9.07-29.el7_5.2.noarch.rpm | Linux |
| Ghostscript security update (CESA-2018:2918) ghostscript-gtk-9.07-31.el7_6.3.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:2918) ghostscript-cups-9.07-31.el7_6.3.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:2918) ghostscript-devel-9.07-31.el7_6.3.i686.rpm | Linux |
| Ghostscript security update (CESA-2018:2918) ghostscript-devel-9.07-31.el7_6.3.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:3760) ghostscript-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript security update (CESA-2018:3760) ghostscript-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:3760) ghostscript-doc-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript security update (CESA-2018:3760) ghostscript-doc-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:3760) ghostscript-gtk-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript security update (CESA-2018:3760) ghostscript-gtk-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:3760) ghostscript-devel-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript security update (CESA-2018:3760) ghostscript-devel-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:3761) ghostscript-9.07-31.el7_6.3.i686.rpm | Linux |
| Ghostscript security update (CESA-2018:3761) ghostscript-9.07-31.el7_6.3.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:3761) ghostscript-doc-9.07-31.el7_6.3.noarch.rpm | Linux |
| Ghostscript security update (CESA-2018:3761) ghostscript-gtk-9.07-31.el7_6.3.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:3761) ghostscript-cups-9.07-31.el7_6.3.x86_64.rpm | Linux |
| Ghostscript security update (CESA-2018:3761) ghostscript-devel-9.07-31.el7_6.3.i686.rpm | Linux |
| Ghostscript security update (CESA-2018:3761) ghostscript-devel-9.07-31.el7_6.3.x86_64.rpm | Linux |
| (RHSA-2018:2918) ghostscript security update ghostscript-9.07-29.el7_5.2.i686.rpm | Linux |
| (RHSA-2018:2918) ghostscript security update ghostscript-9.07-29.el7_5.2.x86_64.rpm | Linux |
| (RHSA-2018:2918) ghostscript security update ghostscript-cups-9.07-29.el7_5.2.x86_64.rpm | Linux |
| (RHSA-2018:2918) ghostscript security update ghostscript-devel-9.07-29.el7_5.2.i686.rpm | Linux |
| (RHSA-2018:2918) ghostscript security update ghostscript-devel-9.07-29.el7_5.2.x86_64.rpm | Linux |
| (RHSA-2018:2918) ghostscript security update ghostscript-doc-9.07-29.el7_5.2.noarch.rpm | Linux |
| (RHSA-2018:2918) ghostscript security update ghostscript-gtk-9.07-29.el7_5.2.x86_64.rpm | Linux |
| (RHSA-2018:3760) ghostscript security update ghostscript-8.70-24.el6_10.2.i686.rpm | Linux |
| (RHSA-2018:3760) ghostscript security update ghostscript-8.70-24.el6_10.2.x86_64.rpm | Linux |
| (RHSA-2018:3760) ghostscript security update ghostscript-devel-8.70-24.el6_10.2.i686.rpm | Linux |
| (RHSA-2018:3760) ghostscript security update ghostscript-devel-8.70-24.el6_10.2.x86_64.rpm | Linux |
| (RHSA-2018:3760) ghostscript security update ghostscript-doc-8.70-24.el6_10.2.i686.rpm | Linux |
| (RHSA-2018:3760) ghostscript security update ghostscript-doc-8.70-24.el6_10.2.x86_64.rpm | Linux |
| (RHSA-2018:3760) ghostscript security update ghostscript-gtk-8.70-24.el6_10.2.i686.rpm | Linux |
| (RHSA-2018:3760) ghostscript security update ghostscript-gtk-8.70-24.el6_10.2.x86_64.rpm | Linux |
| (RHSA-2018:3761) ghostscript security and bug fix update ghostscript-9.07-31.el7_6.3.i686.rpm | Linux |
| (RHSA-2018:3761) ghostscript security and bug fix update ghostscript-9.07-31.el7_6.3.x86_64.rpm | Linux |
| (RHSA-2018:3761) ghostscript security and bug fix update ghostscript-cups-9.07-31.el7_6.3.x86_64.rpm | Linux |
| (RHSA-2018:3761) ghostscript security and bug fix update ghostscript-devel-9.07-31.el7_6.3.i686.rpm | Linux |
| (RHSA-2018:3761) ghostscript security and bug fix update ghostscript-devel-9.07-31.el7_6.3.x86_64.rpm | Linux |
| (RHSA-2018:3761) ghostscript security and bug fix update ghostscript-doc-9.07-31.el7_6.3.noarch.rpm | Linux |
| (RHSA-2018:3761) ghostscript security and bug fix update ghostscript-gtk-9.07-31.el7_6.3.x86_64.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-fonts-other-8.62-32.47.13.1.i586.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-fonts-other-8.62-32.47.13.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-fonts-rus-8.62-32.47.13.1.i586.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-fonts-rus-8.62-32.47.13.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-fonts-std-8.62-32.47.13.1.i586.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-fonts-std-8.62-32.47.13.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-library-8.62-32.47.13.1.i586.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-library-8.62-32.47.13.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-omni-8.62-32.47.13.1.i586.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-omni-8.62-32.47.13.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-x11-8.62-32.47.13.1.i586.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) ghostscript-x11-8.62-32.47.13.1.x86_64.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) libgimpprint-4.2.7-32.47.13.1.i586.rpm | Linux |
| SUSE-SU-2018:3330-1(SUSE Linux Enterprise Server 11-SP4 ) libgimpprint-4.2.7-32.47.13.1.x86_64.rpm | Linux |
| Ghostscript update (ELSA-2018-3760) ghostscript-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript-devel update (ELSA-2018-3760) ghostscript-devel-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript-doc update (ELSA-2018-3760) ghostscript-doc-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript-gtk update (ELSA-2018-3760) ghostscript-gtk-8.70-24.el6_10.2.x86_64.rpm | Linux |
| Ghostscript update (ELSA-2018-3760) ghostscript-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript-devel update (ELSA-2018-3760) ghostscript-devel-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript-doc update (ELSA-2018-3760) ghostscript-doc-8.70-24.el6_10.2.i686.rpm | Linux |
| Ghostscript-gtk update (ELSA-2018-3760) ghostscript-gtk-8.70-24.el6_10.2.i686.rpm | Linux |
| ghostscript Security Update (ALAS-2018-1088) ghostscript-devel-9.06-8.amzn2.0.5.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234