PT-2018-2502 · Artifex+5 · Ghostscript+5

Tavis Ormandy

·

Publicado

2018-10-15

·

Atualizado

2024-06-15

·

CVE-2018-18284

CVSS v3.1

8.6

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions 9.25 and earlier
Description The issue is related to the 1Policy procedure, which is a wrapper for the .forceput procedure in the Ghostscript software suite for document processing, conversion, and generation. It allows an attacker to bypass the secure execution environment despite the use of the -dSAFER option. This can enable a remote attacker to execute arbitrary code by exploiting the vulnerability. The exploitation involves vectors related to the 1Policy operator, which can bypass a sandbox protection mechanism.
Recommendations For Artifex Ghostscript versions 9.25 and earlier, consider updating to a version later than 9.25 to resolve the issue. As a temporary workaround, consider restricting the use of the 1Policy operator until a patch is available. Avoid using the 1Policy operator in affected Ghostscript configurations to minimize the risk of exploitation. At the moment, there is no information about additional mitigation measures.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2018-2799
BDU:2019-00858
CESA-2018_3834
CVE-2018-18284
DLA-1552-1
DSA-4336-1
MGASA-2018-0408
OPENSUSE-SU-2018_4138-1
OPENSUSE-SU-2018_4140-1
OPENSUSE-SU-2024:10783-1
RHSA-2018:3834
RHSA-2018_3834
SUSE-SU-2018:4087-1
SUSE-SU-2018:4090-1
SUSE-SU-2018:4090-2
USN-3803-1

Produtos afetados

Alt Linux
Centos
Ghostscript
Red Hat
Suse
Ubuntu