CVE-2018-16539
Publication date 5 September 2018
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable.
Status
Package | Ubuntu Release | Status |
---|---|---|
ghostscript | 18.04 LTS bionic |
Fixed 9.22~dfsg+1-0ubuntu1.2
|
16.04 LTS xenial |
Fixed 9.18~dfsg~0-0ubuntu2.9
|
|
14.04 LTS trusty |
Fixed 9.10~dfsg-0ubuntu10.13
|
Notes
Patch details
Package | Patch details |
---|---|
ghostscript |
Severity score breakdown
Parameter | Value |
---|---|
Base score | 5.5 · Medium |
Attack vector | Local |
Attack complexity | Low |
Privileges required | None |
User interaction | Required |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | None |
Availability impact | None |
Vector | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
References
Related Ubuntu Security Notices (USN)
- USN-3768-1
- Ghostscript vulnerabilities
- 19 September 2018