critical9.8
CVE-2018-19409
An issue was discovered in Artifex Ghostscript before 9.26.
Impact
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artifex | Ghostscript | before 9.26 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 18.04, 18.10 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Redhat | Enterprise Linux Server Aus | Version 7.6 |
| Redhat | Enterprise Linux Server Eus | Version 7.6 |
| Redhat | Enterprise Linux Workstation | Version 7.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105990
- https://access.redhat.com/errata/RHSA-2018:3834
- https://bugs.ghostscript.com/show_bug.cgi?id=700176
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=661e8d8fb8248c38d67958beda32f3a5876d0c3f
- https://lists.debian.org/debian-lts-announce/2018/11/msg00036.html
- https://security.gentoo.org/glsa/201811-12
- https://usn.ubuntu.com/3831-1/
- https://www.debian.org/security/2018/dsa-4346
- https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26
- http://www.securityfocus.com/bid/105990
- https://access.redhat.com/errata/RHSA-2018:3834
- https://bugs.ghostscript.com/show_bug.cgi?id=700176
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=661e8d8fb8248c38d67958beda32f3a5876d0c3f
- https://lists.debian.org/debian-lts-announce/2018/11/msg00036.html
- https://security.gentoo.org/glsa/201811-12
- https://usn.ubuntu.com/3831-1/
- https://www.debian.org/security/2018/dsa-4346
- https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26