cbcvebase.
CVE-2018-16511
published 2018-09-05

CVE-2018-16511: An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to…

high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact.

Affected

17 ranges
VendorProductVersion rangeFixed in
artifexghostscript< 9.249.24
artifexghostscript>= 0 < 9.22~dfsg-39.22~dfsg-3
artifexghostscript>= 0 < 9.22~dfsg-39.22~dfsg-3
artifexghostscript>= 0 < 9.22~dfsg-39.22~dfsg-3
artifexghostscript>= 0 < 9.22~dfsg-39.22~dfsg-3
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debianghostscript< ghostscript 9.22~dfsg-3 (bookworm)ghostscript 9.22~dfsg-3 (bookworm)
redhatenterprise_linux_desktop
redhatenterprise_linux_server
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_tus
redhatenterprise_linux_workstation

CVSS provenance

nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH