In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or execute code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Sep 21, 2018 | Aug 27, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-develUpgrade ghostscript-cupsUpgrade ghostscript-debuginfo | Apr 27, 2020 | Aug 27, 2018 |
| Centos_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-develUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-doc | Oct 17, 2018 | Aug 27, 2018 |
| Debian | — | Upgrade ghostscript | Sep 9, 2018 | Aug 27, 2018 |
| Freebsd | — | Upgrade ghostscript9-agpl-x11Upgrade ghostscript9-agpl-base | Sep 5, 2018 | Sep 4, 2018 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Nov 26, 2018 | Aug 27, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.24 | Oct 10, 2018 | Aug 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Dec 31, 2018 | Aug 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Dec 11, 2018 | Aug 27, 2018 |
| Oracle_linux | — | Upgrade ghostscript-develUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscriptUpgrade ghostscript-doc | Jul 21, 2020 | Aug 21, 2018 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.3R7.1Update Pulse Connect Secure to version 8.1R15.1Update Pulse Connect Secure to version 8.2R12.1Update Pulse Connect Secure to version 9.0R4 | Oct 28, 2020 | Aug 27, 2018 |
| Redhat_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade ghostscript-develUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscriptNo solution exists | Oct 17, 2018 | Aug 27, 2018 |
| Suse | — | Upgrade libgimpprintUpgrade libgimpprint-develUpgrade ghostscript-x11Upgrade ghostscript-develUpgrade libspectre-develUpgrade ghostscript-miniUpgrade ghostscript-ijs-develUpgrade ghostscript-mini-develUpgrade ghostscriptUpgrade ghostscript-fonts-otherUpgrade ghostscript-fonts-stdUpgrade libspectre1Upgrade ghostscript-omniUpgrade ghostscript-fonts-rusUpgrade ghostscript-library | Oct 3, 2018 | Aug 27, 2018 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Oct 2, 2018 | Aug 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub