cbcvebase.
CVE-2018-19478
published 2019-01-02

CVE-2018-19478: In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

medium5.5CVSS 3.0
AVLACLPRNUIRSUCNINAH
In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Affected

7 ranges
VendorProductVersion rangeFixed in
artifexghostscript< 9.269.26
artifexghostscript>= 0 < 9.26~dfsg-19.26~dfsg-1
artifexghostscript>= 0 < 9.26~dfsg-19.26~dfsg-1
artifexghostscript>= 0 < 9.26~dfsg-19.26~dfsg-1
artifexghostscript>= 0 < 9.26~dfsg-19.26~dfsg-1
debiandebian_linux
debianghostscript< ghostscript 9.26~dfsg-1 (bookworm)ghostscript 9.26~dfsg-1 (bookworm)

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM