Home

CVE-2018-16863

Description

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.083

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2018-16863 are affected in Ghostscript 9.07Windows
Ghostscript security update (CESA-2018:2918) ghostscript-9.07-31.el7_6.3.i686.rpmLinux
Ghostscript security update (CESA-2018:2918) ghostscript-9.07-31.el7_6.3.x86_64.rpmLinux
Ghostscript security update (CESA-2018:2918) ghostscript-gtk-9.07-31.el7_6.3.x86_64.rpmLinux
Ghostscript security update (CESA-2018:2918) ghostscript-cups-9.07-31.el7_6.3.x86_64.rpmLinux
Ghostscript security update (CESA-2018:2918) ghostscript-devel-9.07-31.el7_6.3.i686.rpmLinux
Ghostscript security update (CESA-2018:2918) ghostscript-devel-9.07-31.el7_6.3.x86_64.rpmLinux
Ghostscript security update (CESA-2018:3761) ghostscript-9.07-31.el7_6.3.i686.rpmLinux
Ghostscript security update (CESA-2018:3761) ghostscript-9.07-31.el7_6.3.x86_64.rpmLinux
Ghostscript security update (CESA-2018:3761) ghostscript-doc-9.07-31.el7_6.3.noarch.rpmLinux
Ghostscript security update (CESA-2018:3761) ghostscript-gtk-9.07-31.el7_6.3.x86_64.rpmLinux
Ghostscript security update (CESA-2018:3761) ghostscript-cups-9.07-31.el7_6.3.x86_64.rpmLinux
Ghostscript security update (CESA-2018:3761) ghostscript-devel-9.07-31.el7_6.3.i686.rpmLinux
Ghostscript security update (CESA-2018:3761) ghostscript-devel-9.07-31.el7_6.3.x86_64.rpmLinux
(RHSA-2018:3761) ghostscript security and bug fix update ghostscript-9.07-31.el7_6.3.i686.rpmLinux
(RHSA-2018:3761) ghostscript security and bug fix update ghostscript-9.07-31.el7_6.3.x86_64.rpmLinux
(RHSA-2018:3761) ghostscript security and bug fix update ghostscript-cups-9.07-31.el7_6.3.x86_64.rpmLinux
(RHSA-2018:3761) ghostscript security and bug fix update ghostscript-devel-9.07-31.el7_6.3.i686.rpmLinux
(RHSA-2018:3761) ghostscript security and bug fix update ghostscript-devel-9.07-31.el7_6.3.x86_64.rpmLinux
(RHSA-2018:3761) ghostscript security and bug fix update ghostscript-doc-9.07-31.el7_6.3.noarch.rpmLinux
(RHSA-2018:3761) ghostscript security and bug fix update ghostscript-gtk-9.07-31.el7_6.3.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234