vulnerability

CentOS Linux: CVE-2018-16540: Important: ghostscript security and bug fix update (CESA-2019:0229)

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Sep 5, 2018
Added
Feb 12, 2019
Modified
May 25, 2023

Description

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the interpreter or possibly have unspecified other impact.

Solutions

centos-upgrade-ghostscriptcentos-upgrade-ghostscript-cupscentos-upgrade-ghostscript-debuginfocentos-upgrade-ghostscript-develcentos-upgrade-ghostscript-doccentos-upgrade-ghostscript-gtk
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.