PT-2018-2554 · Artifex+5 · Artifex Ghostscript+5

Tavis Ormandy · Published 2018-08-21 · Updated 2024-06-15 · CVE-2018-16511

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 9.24

Description The issue is related to a type confusion in ztype that could be exploited by remote attackers who can supply crafted PostScript, potentially allowing them to crash the interpreter or have other unspecified impacts. The vulnerability may also affect the confidentiality, integrity, and availability of protected information.

Recommendations For Artifex Ghostscript versions prior to 9.24, update to version 9.24 or later to resolve the issue.

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

ALT-PU-2018-2344

BDU:2019-00972

CESA-2018_3650

CVE-2018-16511

DLA-1504-1

DSA-4288-1

MGASA-2018-0378

OPENSUSE-SU-2018_3036-1

OPENSUSE-SU-2018_3038-1

OPENSUSE-SU-2024:10783-1

RHSA-2018:3650

RHSA-2018_3650

SUSE-SU-2018:2975-1

SUSE-SU-2018:2975-2

SUSE-SU-2018:2975-3

SUSE-SU-2018:2976-1

SUSE-SU-2018:3330-1

USN-3768-1

Affected Products

Alt Linux

Artifex Ghostscript

Centos

Red Hat

Suse

Ubuntu

References · 121

• https://ubuntu.com/security/CVE-2018-16542 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-16511 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:2975-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16539 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16511 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00972 · Security Note
• https://ubuntu.com/security/CVE-2018-15908 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-16511 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2975-3 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3768-1 · Vendor Advisory
• https://artifex.com/news/ghostscript-security-resolved · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16540 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:3330-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16543 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3650 · Vendor Advisory