DEBIAN-CVE-2018-16802

DEBIAN-CVE-2018-16802 PUBLISHED CVSS 7.800000190734863 HIGH

Record from OSV · Published September 10, 2018

An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
ghostscript	Debian:12	9.25~dfsg-1
ghostscript	Debian:14	9.25~dfsg-1
ghostscript	Debian:13	9.25~dfsg-1

Risk scores

CVSS 3.0

7.800000190734863

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Debian:12	ghostscript	0
Debian:14	ghostscript	0
Debian:13	ghostscript	0

Timeline

Sep 10, 2018 CVE Published
Oct 23, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln DEBIAN-CVE-2018-16802
vulnetix vdb fixes DEBIAN-CVE-2018-16802

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2018-16802/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://security-tracker.debian.org/tracker/CVE-2018-16802 advisory

Look up in the Resolve Platform →