psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Dec 10, 2018 | Nov 23, 2018 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade libgsUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-cupsUpgrade ghostscript-gtk | Feb 22, 2021 | Nov 23, 2018 |
| Centos_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-devel | Feb 12, 2019 | Nov 23, 2018 |
| Debian | — | Upgrade ghostscript | Nov 28, 2018 | Nov 23, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.26 | Nov 27, 2018 | Nov 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Apr 2, 2019 | Nov 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Mar 27, 2019 | Nov 23, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Mar 11, 2019 | Nov 23, 2018 |
| Oracle_linux | — | Upgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-develUpgrade ghostscriptUpgrade ghostscript-doc | Jul 21, 2020 | Nov 20, 2018 |
| Redhat_linux | — | Upgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-develUpgrade ghostscriptNo solution existsUpgrade ghostscript-cupsUpgrade ghostscript-doc | Feb 1, 2019 | Nov 23, 2018 |
| Suse | — | Upgrade ghostscript-mini-develUpgrade ghostscript-miniUpgrade ghostscriptUpgrade ghostscript-x11Upgrade libspectre1Upgrade ghostscript-develUpgrade libspectre-devel | Dec 13, 2018 | Nov 23, 2018 |
| Ubuntu | — | Upgrade libgs9Upgrade ghostscript | Dec 6, 2018 | Nov 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub