In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-develUpgrade ghostscript-cupsUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-gtk | Apr 27, 2020 | Sep 5, 2018 |
| Centos_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscript-develUpgrade ghostscript | Dec 20, 2018 | Sep 5, 2018 |
| Debian | — | Upgrade ghostscript | Sep 9, 2018 | Sep 5, 2018 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Nov 26, 2018 | Sep 5, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.24 | Oct 10, 2018 | Sep 5, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Dec 31, 2018 | Sep 5, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Dec 11, 2018 | Sep 5, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Jan 9, 2019 | Sep 5, 2018 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-develUpgrade ghostscript-doc | Dec 18, 2018 | Sep 6, 2018 |
| Redhat_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-debuginfoNo solution existsUpgrade ghostscript-develUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscript | Dec 18, 2018 | Sep 5, 2018 |
| Suse | — | Upgrade MozillaThunderbird-translations-commonUpgrade ghostscript-ijs-develUpgrade libgimpprintUpgrade libspectre1Upgrade ghostscript-fonts-rusUpgrade ghostscript-omniUpgrade ghostscript-x11Upgrade ghostscriptUpgrade libspectre-develUpgrade libgimpprint-develUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbird-translations-otherUpgrade ghostscript-mini-develUpgrade ghostscript-libraryUpgrade ghostscript-fonts-otherUpgrade ghostscript-develUpgrade ghostscript-miniUpgrade MozillaThunderbirdUpgrade ghostscript-fonts-std | Oct 3, 2018 | Sep 5, 2018 |
| Ubuntu | — | Upgrade libgs9Upgrade ghostscript | Oct 2, 2018 | Sep 5, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub