Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-16510

Fixed in a distro release EPSS 2%

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact.

Published 2018-09-05 · CVE record · OSV

Products: artifex ghostscript, canonical ubuntu_linux, artifex gpl_ghostscript

Distro releases

ReleasePackageFixed in
Debian 12ghostscript9.25~dfsg-1
Debian 13ghostscript9.25~dfsg-1
Debian 14ghostscript9.25~dfsg-1
SUSE Enterprise Storage 4ghostscript9.25-23.13.1
SUSE Linux Enterprise Desktop 12 SP3ghostscript9.25-23.13.1
SUSE Linux Enterprise Module for Basesystem 15ghostscript9.25-3.6.1
SUSE Linux Enterprise Module for Desktop Applications 15libspectre0.2.8-3.2.1
SUSE Linux Enterprise Server 12 SP1-LTSSghostscript9.25-23.13.1
SUSE Linux Enterprise Server 12 SP2-BCLghostscript9.25-23.13.1
SUSE Linux Enterprise Server 12 SP2-LTSSghostscript9.25-23.13.1
SUSE Linux Enterprise Server 12 SP3ghostscript9.25-23.13.1
SUSE Linux Enterprise Server 12-LTSSghostscript9.25-23.13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1ghostscript9.25-23.13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2ghostscript9.25-23.13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3ghostscript9.25-23.13.1
SUSE Linux Enterprise Software Development Kit 12 SP3ghostscript9.25-23.13.1
SUSE OpenStack Cloud 7ghostscript9.25-23.13.1
Ubuntu 14.04 LTSghostscript9.10~dfsg-0ubuntu10.13
Ubuntu 14.04 LTSghostscript9.25~dfsg+1-0ubuntu0.14.04.1
Ubuntu 16.04 LTSghostscript9.18~dfsg~0-0ubuntu2.9
Ubuntu 16.04 LTSghostscript9.25~dfsg+1-0ubuntu0.16.04.1
Ubuntu 18.04 LTSghostscript9.22~dfsg+1-0ubuntu1.2
Ubuntu 18.04 LTSghostscript9.25~dfsg+1-0ubuntu0.18.04.1
openSUSE Tumbleweedghostscript9.54.0-2.2