Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2018-16802 PUBLISHED CVSS 7.800000190734863 HIGH

An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.6ghostscript9.24-r0, 0, 8.64-r0
Alpine:v3.23ghostscript8.71-r1, 9.24-r0, 9.22-r0
Alpine:v3.22ghostscript9.06-r1, 8.70-r0, 8.71-r0
Alpine:v3.14ghostscript9.15-r0, 9.21-r3, 9.21-r2
Alpine:v3.19ghostscript8.64-r0, 9.16-r0, 9.15-r1
Alpine:v3.17ghostscript9.24-r0, 9.22-r0, 9.21-r3
Alpine:v3.13ghostscript9.21-r2, 9.15-r1, 9.15-r0
Alpine:v3.8ghostscript9.16-r1, 9.16-r0, 9.15-r1
Alpine:v3.12ghostscript9.19-r0, 0, 8.64-r0
Alpine:v3.7ghostscript0, 9.24-r0, 9.22-r0
Alpine:v3.21ghostscript9.16-r0, 9.24-r0, 9.22-r0
Alpine:v3.20ghostscript9.16-r1, 9.16-r2, 9.18-r0
Alpine:v3.9ghostscript9.24-r0, 0, 8.64-r0
Alpine:v3.15ghostscript9.24-r0, 9.22-r0, 9.21-r3
Alpine:v3.18ghostscript9.24-r0, 0, 8.64-r0
Alpine:v3.5ghostscript9.15-r1, 9.16-r0, 9.16-r1
Alpine:v3.16ghostscript9.06-r2, 9.16-r1, 9.16-r2
Alpine:v3.10ghostscript8.64-r0, 9.24-r0, 9.22-r0
Alpine:v3.11ghostscript9.06-r0, 9.05-r0, 9.04-r0

Timeline

References

Open in Interactive Console →