CVE-2018-16539

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable.

Link	Resource
https://www.artifex.com/news/ghostscript-security-resolved/	Patch Vendor Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=699658	Issue Tracking Permissions Required
http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=a054156d425b4dbdaaa9fda4b5f1182b27598c2b	Vendor Advisory Patch
https://www.debian.org/security/2018/dsa-4288	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html	Mailing List Third Party Advisory
https://usn.ubuntu.com/3768-1/	Third Party Advisory
https://security.gentoo.org/glsa/201811-12	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3650	Third Party Advisory

Configuration 1

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

---

Published : 2018-09-05 06:29

Updated : 2019-03-07 03:57

---

NVD link : CVE-2018-16539

Mitre link : CVE-2018-16539

No products.

CWE-200