medium6.3

CVE-2018-18073

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an err…

Impact

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.

Affected products

Vendor	Product	Affected versions
Artifex	Ghostscript	through 9.25
Debian	Debian Linux	Versions 8.0, 9.0
Canonical	Ubuntu Linux	Versions 14.04, 16.04, 18.04, 18.10
Redhat	Enterprise Linux Desktop	Version 7.0
Redhat	Enterprise Linux Server	Version 7.0
Redhat	Enterprise Linux Server Aus	Version 7.6
Redhat	Enterprise Linux Server Eus	Version 7.6
Redhat	Enterprise Linux Server Tus	Version 7.6
Redhat	Enterprise Linux Workstation	Version 7.0

Weakness classification

CWE-200

References

NVD record
CVE.org record
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=34cc326eb2c5695833361887fe0b32e8d987741c
http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.html
http://www.openwall.com/lists/oss-security/2018/10/10/12
https://access.redhat.com/errata/RHSA-2018:3834
https://bugs.chromium.org/p/project-zero/issues/detail?id=1690
https://bugs.ghostscript.com/show_bug.cgi?id=699927
https://lists.debian.org/debian-lts-announce/2018/10/msg00013.html
https://usn.ubuntu.com/3803-1/
https://www.debian.org/security/2018/dsa-4336
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=34cc326eb2c5695833361887fe0b32e8d987741c
http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.html
http://www.openwall.com/lists/oss-security/2018/10/10/12
https://access.redhat.com/errata/RHSA-2018:3834
https://bugs.chromium.org/p/project-zero/issues/detail?id=1690
https://bugs.ghostscript.com/show_bug.cgi?id=699927
https://lists.debian.org/debian-lts-announce/2018/10/msg00013.html
https://usn.ubuntu.com/3803-1/
https://www.debian.org/security/2018/dsa-4336