Lucene search
Veracode Vulnerability DatabaseVERACODE:19636HistoryMay 16, 2019 - 3:22 a.m.
Denial Of Service (DoS)
2019-05-1603:22:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
EPSS
0.01
Percentile
83.6%
Ghostscript is vulnerable to denial of service (DoS) attacks. This is because the .type operator does not properly validate its operands. A remote attacker could supply crafted PostScript to crash the interpreter impacting the availability.
References
git.ghostscript.com/?p=ghostpdl.git;a=commit;h=0edd3d6c634a577db261615a9dc2719bca7f6e01
seclists.org/oss-sec/2018/q3/182
access.redhat.com/errata/RHSA-2018:3650
access.redhat.com/security/updates/classification/#important
bugs.ghostscript.com/show_bug.cgi?id=699659
lists.debian.org/debian-lts-announce/2018/09/msg00015.html
security.gentoo.org/glsa/201811-12
usn.ubuntu.com/3768-1/
www.artifex.com/news/ghostscript-security-resolved/
www.debian.org/security/2018/dsa-4288
Related
nvd
nvd
CVE-2018-16511
2018-09-05 06:29:00
debiancve
debiancve
CVE-2018-16511
2018-09-05 06:29:00
prion
prion
Type confusion
2018-09-05 06:29:00
redhatcve
redhatcve
CVE-2018-16511
2018-09-13 11:49:25
cvelist
cvelist
CVE-2018-16511
2018-09-05 06:00:00
cve
cve
CVE-2018-16511
2018-09-05 06:29:00
ubuntucve
ubuntucve
CVE-2018-16511
2018-09-05 00:00:00
nessus
nessus
RHEL 7 : ghostscript (RHSA-2018:3650)
2018-11-27 00:00:00
CentOS 7 : ghostscript (CESA-2018:3650)
2018-12-14 00:00:00
Oracle Linux 7 : ghostscript (ELSA-2018-3650)
2018-11-27 00:00:00
openvas
openvas
CentOS Update for ghostscript CESA-2018:3650 centos7
2018-12-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:3330-1)
2021-06-09 00:00:00
Debian: Security Advisory (DSA-4288-1)
2018-09-06 00:00:00
redhat
redhat
(RHSA-2018:3650) Important: ghostscript security update
2018-11-26 23:01:42
centos
centos
ghostscript security update
2018-12-13 20:45:17
oraclelinux
oraclelinux
ghostscript security update
2018-11-26 00:00:00
ghostscript security, bug fix, and enhancement update
2019-08-13 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Ghostscript affect PowerKVM
2019-03-04 05:50:01
debian
debian
[SECURITY] [DSA 4288-1] ghostscript security update
2018-09-07 21:23:16
[SECURITY] [DLA 1504-1] ghostscript security update
2018-09-13 12:23:11
osv
osv
ghostscript - security update
2018-09-07 00:00:00
ghostscript - security update
2018-09-13 00:00:00
ghostscript-9.54.0-2.2 on GA media
2024-06-15 00:00:00
mageia
mageia
Updated ghostscript packages fix security vulnerabilities
2018-09-21 02:17:55
amazon
amazon
Important: ghostscript
2018-10-08 22:17:00
ubuntu
ubuntu
Ghostscript vulnerabilities
2018-09-19 00:00:00
suse
suse
Security update for ghostscript (important)
2018-10-05 21:13:14
Security update for ghostscript (important)
2018-10-05 21:10:24
gentoo
gentoo
GPL Ghostscript: Multiple vulnerabilities
2018-11-24 00:00:00