CVE-2018-16542

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
artifexghostscript
𝑥
< 9.24
redhatenterprise_linux
7.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server_eus
7.5
redhatenterprise_linux_workstation
7.0
debiandebian_linux
8.0
debiandebian_linux
9.0
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ghostscript
bookworm
10.0.0~dfsg-11+deb12u4
fixed
bookworm (security)
10.0.0~dfsg-11+deb12u5
fixed
bullseye
9.53.3~dfsg-7+deb11u7
fixed
bullseye (security)
9.53.3~dfsg-7+deb11u8
fixed
sid
10.04.0~dfsg-1
fixed
trixie
10.04.0~dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ghostscript
bionic
Fixed 9.22~dfsg+1-0ubuntu1.2
released
trusty
Fixed 9.10~dfsg-0ubuntu10.13
released
xenial
Fixed 9.18~dfsg~0-0ubuntu2.9
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
ghostscript
suse enterprise desktop 15
9.25-3.6.1
fixed
suse enterprise desktop 15 SP1
9.25-3.6.1
fixed
suse enterprise desktop 15 SP2
9.25-3.6.1
fixed
suse enterprise desktop 15 SP3
9.25-3.6.1
fixed
suse enterprise desktop 15 SP4
9.25-3.6.1
fixed
suse enterprise desktop 15 SP5
9.25-3.6.1
fixed
suse enterprise desktop 15 SP6
9.25-3.6.1
fixed
suse enterprise desktop 15 SP7
9.25-3.6.1
fixed
suse enterprise sap 12 SP1
9.25-23.13.1
fixed
suse enterprise sap 12 SP3
9.25-23.13.1
fixed
suse enterprise sap 12 SP5
9.27-23.28.1
fixed
suse enterprise sap 15
9.25-3.6.1
fixed
suse enterprise sap 15 SP1
9.25-3.6.1
fixed
suse enterprise sap 15 SP2
9.25-3.6.1
fixed
suse enterprise sap 15 SP3
9.25-3.6.1
fixed
suse enterprise sap 15 SP4
9.25-3.6.1
fixed
suse enterprise sap 15 SP5
9.25-3.6.1
fixed
suse enterprise sap 15 SP6
9.25-3.6.1
fixed
suse enterprise sap 15 SP7
9.25-3.6.1
fixed
suse enterprise server 12
9.25-23.13.1
fixed
suse enterprise server 12 SP1
9.25-23.13.1
fixed
suse enterprise server 12 SP2
9.25-23.13.1
fixed
suse enterprise server 12 SP3
9.25-23.13.1
fixed
suse enterprise server 12 SP4
9.25-23.13.1
fixed
suse enterprise server 12 SP5
9.27-23.28.1
fixed
suse enterprise server 15
9.25-3.6.1
fixed
suse enterprise server 15 SP1
9.25-3.6.1
fixed
suse enterprise server 15 SP2
9.25-3.6.1
fixed
suse enterprise server 15 SP3
9.25-3.6.1
fixed
suse enterprise server 15 SP4
9.25-3.6.1
fixed
suse enterprise server 15 SP5
9.25-3.6.1
fixed
suse enterprise server 15 SP6
9.25-3.6.1
fixed
suse enterprise server 15 SP7
9.25-3.6.1
fixed
ghostscript-devel
suse enterprise desktop 15
9.25-3.6.1
fixed
suse enterprise desktop 15 SP1
9.25-3.6.1
fixed
suse enterprise desktop 15 SP2
9.25-3.6.1
fixed
suse enterprise desktop 15 SP3
9.25-3.6.1
fixed
suse enterprise desktop 15 SP4
9.25-3.6.1
fixed
suse enterprise desktop 15 SP5
9.25-3.6.1
fixed
suse enterprise desktop 15 SP6
9.25-3.6.1
fixed
suse enterprise desktop 15 SP7
9.25-3.6.1
fixed
suse enterprise sap 15
9.25-3.6.1
fixed
suse enterprise sap 15 SP1
9.25-3.6.1
fixed
suse enterprise sap 15 SP2
9.25-3.6.1
fixed
suse enterprise sap 15 SP3
9.25-3.6.1
fixed
suse enterprise sap 15 SP4
9.25-3.6.1
fixed
suse enterprise sap 15 SP5
9.25-3.6.1
fixed
suse enterprise sap 15 SP6
9.25-3.6.1
fixed
suse enterprise sap 15 SP7
9.25-3.6.1
fixed
suse enterprise server 15
9.25-3.6.1
fixed
suse enterprise server 15 SP1
9.25-3.6.1
fixed
suse enterprise server 15 SP2
9.25-3.6.1
fixed
suse enterprise server 15 SP3
9.25-3.6.1
fixed
suse enterprise server 15 SP4
9.25-3.6.1
fixed
suse enterprise server 15 SP5
9.25-3.6.1
fixed
suse enterprise server 15 SP6
9.25-3.6.1
fixed
suse enterprise server 15 SP7
9.25-3.6.1
fixed
ghostscript-x11
suse enterprise desktop 15
9.25-3.6.1
fixed
suse enterprise desktop 15 SP1
9.25-3.6.1
fixed
suse enterprise desktop 15 SP2
9.25-3.6.1
fixed
suse enterprise desktop 15 SP3
9.25-3.6.1
fixed
suse enterprise desktop 15 SP4
9.25-3.6.1
fixed
suse enterprise desktop 15 SP5
9.25-3.6.1
fixed
suse enterprise desktop 15 SP6
9.25-3.6.1
fixed
suse enterprise desktop 15 SP7
9.25-3.6.1
fixed
suse enterprise sap 12 SP1
9.25-23.13.1
fixed
suse enterprise sap 12 SP3
9.25-23.13.1
fixed
suse enterprise sap 12 SP5
9.27-23.28.1
fixed
suse enterprise sap 15
9.25-3.6.1
fixed
suse enterprise sap 15 SP1
9.25-3.6.1
fixed
suse enterprise sap 15 SP2
9.25-3.6.1
fixed
suse enterprise sap 15 SP3
9.25-3.6.1
fixed
suse enterprise sap 15 SP4
9.25-3.6.1
fixed
suse enterprise sap 15 SP5
9.25-3.6.1
fixed
suse enterprise sap 15 SP6
9.25-3.6.1
fixed
suse enterprise sap 15 SP7
9.25-3.6.1
fixed
suse enterprise server 12
9.25-23.13.1
fixed
suse enterprise server 12 SP1
9.25-23.13.1
fixed
suse enterprise server 12 SP2
9.25-23.13.1
fixed
suse enterprise server 12 SP3
9.25-23.13.1
fixed
suse enterprise server 12 SP4
9.25-23.13.1
fixed
suse enterprise server 12 SP5
9.27-23.28.1
fixed
suse enterprise server 15
9.25-3.6.1
fixed
suse enterprise server 15 SP1
9.25-3.6.1
fixed
suse enterprise server 15 SP2
9.25-3.6.1
fixed
suse enterprise server 15 SP3
9.25-3.6.1
fixed
suse enterprise server 15 SP4
9.25-3.6.1
fixed
suse enterprise server 15 SP5
9.25-3.6.1
fixed
suse enterprise server 15 SP6
9.25-3.6.1
fixed
suse enterprise server 15 SP7
9.25-3.6.1
fixed
libspectre-devel
suse enterprise desktop 15
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP1
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP2
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP3
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP4
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP5
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP6
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP7
0.2.8-3.2.1
fixed
suse enterprise sap 15
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP1
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP2
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP3
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP4
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP5
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP6
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP7
0.2.8-3.2.1
fixed
suse enterprise server 15
0.2.8-3.2.1
fixed
suse enterprise server 15 SP1
0.2.8-3.2.1
fixed
suse enterprise server 15 SP2
0.2.8-3.2.1
fixed
suse enterprise server 15 SP3
0.2.8-3.2.1
fixed
suse enterprise server 15 SP4
0.2.8-3.2.1
fixed
suse enterprise server 15 SP5
0.2.8-3.2.1
fixed
suse enterprise server 15 SP6
0.2.8-3.2.1
fixed
suse enterprise server 15 SP7
0.2.8-3.2.1
fixed
libspectre1
suse enterprise desktop 15
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP1
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP2
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP3
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP4
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP5
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP6
0.2.8-3.2.1
fixed
suse enterprise desktop 15 SP7
0.2.8-3.2.1
fixed
suse enterprise sap 15
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP1
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP2
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP3
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP4
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP5
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP6
0.2.8-3.2.1
fixed
suse enterprise sap 15 SP7
0.2.8-3.2.1
fixed
suse enterprise server 15
0.2.8-3.2.1
fixed
suse enterprise server 15 SP1
0.2.8-3.2.1
fixed
suse enterprise server 15 SP2
0.2.8-3.2.1
fixed
suse enterprise server 15 SP3
0.2.8-3.2.1
fixed
suse enterprise server 15 SP4
0.2.8-3.2.1
fixed
suse enterprise server 15 SP5
0.2.8-3.2.1
fixed
suse enterprise server 15 SP6
0.2.8-3.2.1
fixed
suse enterprise server 15 SP7
0.2.8-3.2.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
ghostscript
RHEL 7
0:9.07-29.el7_5.2
fixed
ghostscript-cups
RHEL 7
0:9.07-29.el7_5.2
fixed
ghostscript-devel
RHEL 7
0:9.07-29.el7_5.2
fixed
ghostscript-doc
RHEL 7
0:9.07-29.el7_5.2
fixed
ghostscript-gtk
RHEL 7
0:9.07-29.el7_5.2
fixed