In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Sep 21, 2018 | Aug 28, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-develUpgrade ghostscript-docUpgrade ghostscript | Apr 27, 2020 | Aug 28, 2018 |
| Centos_linux | — | Upgrade ghostscript-docUpgrade ghostscript-develUpgrade ghostscriptUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-debuginfo | Dec 20, 2018 | Aug 28, 2018 |
| Debian | — | Upgrade ghostscript | Sep 9, 2018 | Aug 28, 2018 |
| Freebsd | — | Upgrade ghostscript9-agpl-baseUpgrade ghostscript9-agpl-x11 | Sep 5, 2018 | Sep 4, 2018 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Nov 26, 2018 | Aug 28, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.24 | Oct 10, 2018 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Feb 22, 2019 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Feb 15, 2019 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Jan 9, 2019 | Aug 28, 2018 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-develUpgrade ghostscript-doc | Dec 18, 2018 | Sep 6, 2018 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R4Update Pulse Connect Secure to version 8.2R12.1Update Pulse Connect Secure to version 8.1R15.1Update Pulse Connect Secure to version 8.3R7.1 | Oct 28, 2020 | Aug 28, 2018 |
| Redhat_linux | — | Upgrade ghostscriptUpgrade ghostscript-debuginfoUpgrade ghostscript-docNo solution existsUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-devel | Dec 18, 2018 | Aug 28, 2018 |
| Suse | — | Upgrade ghostscript-miniUpgrade ghostscript-x11Upgrade libspectre-develUpgrade ghostscriptUpgrade ghostscript-mini-develUpgrade ghostscript-develUpgrade libspectre1 | Oct 3, 2018 | Aug 28, 2018 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs9 | Oct 2, 2018 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub