Release Date: | 2018-09-10 |
An issue was discovered in Artifex Ghostscript before 9.25. Incorrect restoration of privilege checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the pipe instruction. This is due to an incomplete fix for CVE-2018-16509.
See more information about CVE-2018-16802 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS v3.0 metrics and score provided are preliminary and subject to review.
Base Score: | 7.8 | Base Metrics: | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Access Vector: | Local network | Attack Complexity: | Low |
Privileges Required: | None | User Interaction: | Required |
Scope: | Unchanged | Confidentiality Impact: | High |
Integrity Impact: | High | Availability Impact: | High |
Platform | Errata | Release Date |
Oracle Linux version 7 (ghostscript) | ELSA-2018-3834 | 2018-12-18 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team