PT-2018-1932 · Artifex+5 · Artifex Ghostscript+5

Arkadiy Tetelman · Published 2018-11-14 · Updated 2024-06-15 · CVE-2018-19409

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 9.26

Description An issue in Artifex Ghostscript is related to incorrect checking of LockSafetyParams when another device is used, which can allow a bypass of security restrictions. The vulnerability is associated with errors in the implementation of security checks for standard elements.

Recommendations For Artifex Ghostscript versions prior to 9.26, update to version 9.26 or later to resolve the issue.

Fix

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

ALT-PU-2018-2799

BDU:2018-01539

CESA-2018_3834

CVE-2018-19409

DLA-1598-1

DSA-4346-1

DSA-4346-2

OPENSUSE-SU-2018_4138-1

OPENSUSE-SU-2018_4140-1

OPENSUSE-SU-2024:10783-1

RHSA-2018:3834

RHSA-2018_3834

SUSE-SU-2018:4087-1

SUSE-SU-2018:4090-1

SUSE-SU-2018:4090-2

USN-3831-1

USN-3831-2

Affected Products

Alt Linux

Artifex Ghostscript

Centos

Red Hat

Suse

Ubuntu

References · 93

• https://security-tracker.debian.org/tracker/CVE-2018-19409 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-19409 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-19409 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-19409 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:4087-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:4090-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4346-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19476 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10783-1 · Vendor Advisory
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=57444186 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:4090-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3831-2 · Vendor Advisory
• https://debian.org/security/2018/dsa-4346 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3831-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19477 · Vendor Advisory