NetSight
IP …
high7.8

CVE-2018-16540

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice h…

Impact

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the interpreter or possibly have unspecified other impact.

Affected products

VendorProductAffected versions
ArtifexGhostscript
before 9.24
RedhatOpenshift Container Platform
Version 3.11
RedhatEnterprise Linux
Version 7.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Versions 7.0, 7.6
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Versions 7.5, 7.6
RedhatEnterprise Linux Server Tus
Version 7.6
RedhatEnterprise Linux Workstation
Version 7.0
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04

Weakness classification

CWE-416

References