CVE-2018-15909

In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.

CVSS v3 7.8 HIGH
CVSS v2.0 6.8 MEDIUM

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6
http://www.securityfocus.com/bid/105178	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:3650	Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101	Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/201811-12	Third Party Advisory
https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/3768-1/	Third Party Advisory
https://www.kb.cert.org/vuls/id/332928	Patch Third Party Advisory US Government Resource
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6
http://www.securityfocus.com/bid/105178	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:3650	Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101	Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/201811-12	Third Party Advisory
https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/3768-1/	Third Party Advisory
https://www.kb.cert.org/vuls/id/332928	Patch Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::

Configuration 3 (hide)

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:artifex:gpl_ghostscript:*:*:*:*:*:*:*:*

Configuration 5 (hide)

OR	cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:::::::*
	cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*

Configuration 6 (hide)

OR	cpe:2.3:a:pulsesecure:pulse_connect_secure::::::::
	cpe:2.3:a:pulsesecure:pulse_connect_secure::::::::
	cpe:2.3:a:pulsesecure:pulse_connect_secure::::::::

History

21 Nov 2024, 03:51

Type	Values Removed	Values Added
References	~~() http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b -~~	() http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b -
References	~~() http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6 -~~	() http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6 -
References	~~() http://www.securityfocus.com/bid/105178 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/105178 - Third Party Advisory, VDB Entry
References	~~() https://access.redhat.com/errata/RHSA-2018:3650 - Third Party Advisory~~	() https://access.redhat.com/errata/RHSA-2018:3650 - Third Party Advisory
References	~~() https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - Patch, Third Party Advisory~~	() https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - Patch, Third Party Advisory
References	~~() https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - Mailing List, Third Party Advisory~~	() https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - Mailing List, Third Party Advisory
References	~~() https://security.gentoo.org/glsa/201811-12 - Third Party Advisory~~	() https://security.gentoo.org/glsa/201811-12 - Third Party Advisory
References	~~() https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS -~~	() https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS -
References	~~() https://usn.ubuntu.com/3768-1/ - Third Party Advisory~~	() https://usn.ubuntu.com/3768-1/ - Third Party Advisory
References	~~() https://www.kb.cert.org/vuls/id/332928 - Patch, Third Party Advisory, US Government Resource~~	() https://www.kb.cert.org/vuls/id/332928 - Patch, Third Party Advisory, US Government Resource

Information

Published : 2018-08-27 17:29

Updated : 2024-11-21 03:51

NVD link : CVE-2018-15909

Mitre link : CVE-2018-15909

CVE.ORG link : CVE-2018-15909

JSON object : View

Products Affected

redhat

enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_tus
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_desktop

artifex

ghostscript
gpl_ghostscript

pulsesecure

pulse_connect_secure

canonical

ubuntu_linux

debian

debian_linux

CWE

CWE-704

Incorrect Type Conversion or Cast

{"id": "CVE-2018-15909", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2018-08-27T17:29:00.437", "references": [{"url": "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b", "source": "cve@mitre.org"}, {"url": "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/105178", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://access.redhat.com/errata/RHSA-2018:3650", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101", "tags": ["Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://security.gentoo.org/glsa/201811-12", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS", "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/3768-1/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.kb.cert.org/vuls/id/332928", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/105178", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2018:3650", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101", "tags": ["Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.gentoo.org/glsa/201811-12", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/3768-1/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.kb.cert.org/vuls/id/332928", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-704"}]}], "descriptions": [{"lang": "en", "value": "In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code."}, {"lang": "es", "value": "En Artifex Ghostscript 9.23 antes del 24/08/2018, los atacantes podr\u00edan emplear una confusi\u00f3n de tipos usando el operador .shfill para proporcionar archivos PostScript manipulados para provocar el cierre inesperado del int\u00e9rprete o ejecutar c\u00f3digo."}], "lastModified": "2024-11-21T03:51:41.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85D43CD3-8F42-4021-A0BB-6881E01B7E3F", "versionEndIncluding": "9.23"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:artifex:gpl_ghostscript:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "039EAECA-0BCE-4B2D-8714-30B691F182CA", "versionEndExcluding": "9.26"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87A4ADF2-DB3D-4454-A969-D7EF874D06A2", "versionEndExcluding": "8.2r12.1", "versionStartIncluding": "8.2r1.0"}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C4E8F7B-CFCF-4223-A351-620A12824BD4", "versionEndExcluding": "8.3r7.1", "versionStartIncluding": "8.3r1"}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA7F5A3E-380D-4044-9712-FD2F5AB435FF", "versionEndExcluding": "9.0r3.4", "versionStartIncluding": "9.0r1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

7.8 /10