CVE-2018-16541

Description

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.454

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Ghostscript 9.23	Windows
Ghostscript security update (CESA-2018:3834) ghostscript-9.07-31.el7_6.6.i686.rpm	Linux
Ghostscript security update (CESA-2018:3834) ghostscript-9.07-31.el7_6.6.x86_64.rpm	Linux
Ghostscript security update (CESA-2018:3834) ghostscript-doc-9.07-31.el7_6.6.noarch.rpm	Linux
Ghostscript security update (CESA-2018:3834) ghostscript-gtk-9.07-31.el7_6.6.x86_64.rpm	Linux
Ghostscript security update (CESA-2018:3834) ghostscript-cups-9.07-31.el7_6.6.x86_64.rpm	Linux
Ghostscript security update (CESA-2018:3834) ghostscript-devel-9.07-31.el7_6.6.i686.rpm	Linux
Ghostscript security update (CESA-2018:3834) ghostscript-devel-9.07-31.el7_6.6.x86_64.rpm	Linux
(RHSA-2018:3834) ghostscript security and bug fix update ghostscript-9.07-31.el7_6.6.i686.rpm	Linux
(RHSA-2018:3834) ghostscript security and bug fix update ghostscript-9.07-31.el7_6.6.x86_64.rpm	Linux
(RHSA-2018:3834) ghostscript security and bug fix update ghostscript-cups-9.07-31.el7_6.6.x86_64.rpm	Linux
(RHSA-2018:3834) ghostscript security and bug fix update ghostscript-devel-9.07-31.el7_6.6.i686.rpm	Linux
(RHSA-2018:3834) ghostscript security and bug fix update ghostscript-devel-9.07-31.el7_6.6.x86_64.rpm	Linux
(RHSA-2018:3834) ghostscript security and bug fix update ghostscript-doc-9.07-31.el7_6.6.noarch.rpm	Linux
(RHSA-2018:3834) ghostscript security and bug fix update ghostscript-gtk-9.07-31.el7_6.6.x86_64.rpm	Linux
ghostscript Security Update (ALAS-2018-1088) ghostscript-devel-9.06-8.amzn2.0.5.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234