Lucene search
Veracode Vulnerability DatabaseVERACODE:13180HistoryJan 15, 2019 - 9:26 a.m.
Authorization Bypass
2019-01-1509:26:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.003 Low
EPSS
Percentile
69.3%
ghostscript is vulnerable to authorization bypass. An attacker is able to bypass .tempfile restrictions to write files onto the system using malicious PostScript files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ghostscript | eq | 9.07__28.el7_4.2 | |
| ghostscript | eq | 9.07__29.el7_5.2 | |
| ghostscript | eq | 9.07__20.el7_3.1 |
References
git.ghostscript.com/?p=ghostpdl.git;a=commit;h=0d3901189f245232f0161addf215d7268c4d05a3
access.redhat.com/errata/RHSA-2018:3650
access.redhat.com/security/updates/classification/#important
lists.debian.org/debian-lts-announce/2018/09/msg00015.html
security.gentoo.org/glsa/201811-12
usn.ubuntu.com/3768-1/
www.debian.org/security/2018/dsa-4288
www.kb.cert.org/vuls/id/332928
Related
ubuntucve
ubuntucve
CVE-2018-15908
2018-08-27 00:00:00
redhatcve
redhatcve
CVE-2018-15908
2022-01-13 06:39:54
alpinelinux
alpinelinux
CVE-2018-15908
2018-08-27 17:29:00
debiancve
debiancve
CVE-2018-15908
2018-08-27 17:29:00
cve
cve
CVE-2018-15908
2018-08-27 17:29:00
prion
prion
Code injection
2018-08-27 17:29:00
osv
osv
CVE-2018-15908
2018-08-27 17:29:00
ghostscript - security update
2018-09-07 00:00:00
ghostscript - security update
2018-09-13 00:00:00
cvelist
cvelist
CVE-2018-15908
2018-08-27 17:00:00
nvd
nvd
CVE-2018-15908
2018-08-27 17:29:00
freebsd
freebsd
Ghostscript -- arbitrary code execution
2018-08-21 00:00:00
redhat
redhat
(RHSA-2018:3650) Important: ghostscript security update
2018-11-26 23:01:42
oraclelinux
oraclelinux
ghostscript security update
2018-11-26 00:00:00
ghostscript security, bug fix, and enhancement update
2019-08-13 00:00:00
centos
centos
ghostscript security update
2018-12-13 20:45:17
nessus
nessus
FreeBSD : Ghostscript -- arbitrary code execution (30c0f878-b03e-11e8-be8a-0011d823eebd)
2018-09-05 00:00:00
Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20181127)
2018-11-28 00:00:00
Oracle Linux 7 : ghostscript (ELSA-2018-3650)
2018-11-27 00:00:00
openvas
openvas
CentOS Update for ghostscript CESA-2018:3650 centos7
2018-12-18 00:00:00
Debian: Security Advisory (DSA-4288-1)
2018-09-06 00:00:00
Debian: Security Advisory (DLA-1504-1)
2018-09-12 00:00:00
debian
debian
[SECURITY] [DSA 4288-1] ghostscript security update
2018-09-07 21:23:16
[SECURITY] [DLA 1504-1] ghostscript security update
2018-09-13 12:23:11
ibm
ibm
Security Bulletin: Vulnerabilities in Ghostscript affect PowerKVM
2019-03-04 05:50:01
amazon
amazon
Important: ghostscript
2018-10-08 22:17:00
mageia
mageia
Updated ghostscript packages fix security vulnerabilities
2018-09-21 02:17:55
suse
suse
Security update for ghostscript (important)
2018-10-05 21:10:24
Security update for ghostscript (important)
2018-10-05 21:13:14
ubuntu
ubuntu
Ghostscript vulnerabilities
2018-09-19 00:00:00
gentoo
gentoo
GPL Ghostscript: Multiple vulnerabilities
2018-11-24 00:00:00