Vulnerability Description
An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even though it is not intended for use during document processing (e.g., after the startup phase). This leads to memory corruption, allowing remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact. Note: A reputable source believes that the CVE is potentially a duplicate of CVE-2018-15910 as explained in Red Hat bugzilla (https://bugzilla.redhat.com/show_bug.cgi?id=1626193)
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Artifex | Ghostscript | < 9.24 |
| Canonical | Ubuntu Linux | 14.04 |
| Debian | Debian Linux | 8.0 |
Related Weaknesses (CWE)
References
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=1497d65039885a52b5
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=971472c83a345a16da
- https://bugzilla.redhat.com/show_bug.cgi?id=1626193
- https://lists.debian.org/debian-lts-announce/2018/09/msg00015.htmlMailing ListThird Party Advisory
- https://seclists.org/oss-sec/2018/q3/182Mailing ListPatchThird Party Advisory
- https://security.gentoo.org/glsa/201811-12Third Party Advisory
- https://usn.ubuntu.com/3768-1/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4288Third Party Advisory
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=1497d65039885a52b5
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=971472c83a345a16da
- https://bugzilla.redhat.com/show_bug.cgi?id=1626193
- https://lists.debian.org/debian-lts-announce/2018/09/msg00015.htmlMailing ListThird Party Advisory
- https://seclists.org/oss-sec/2018/q3/182Mailing ListPatchThird Party Advisory
- https://security.gentoo.org/glsa/201811-12Third Party Advisory
- https://usn.ubuntu.com/3768-1/Third Party Advisory
FAQ
What is CVE-2018-16585?
CVE-2018-16585 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even though it is not intended for use during document processing (e.g., after the star...
How severe is CVE-2018-16585?
CVE-2018-16585 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-16585?
Check the references section above for vendor advisories and patch information. Affected products include: Artifex Ghostscript, Canonical Ubuntu Linux, Debian Debian Linux.