CVE-2018-17961

HIGH8.6EPSS 10.5%

ghostscript - security update

Published: 10/15/2018Modified: 4/28/2026

Description

Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.

Affected packages (3)

Alpine/ghostscriptfrom 0, < 9.25-r1
Debian/ghostscriptfrom 0, < 9.25~dfsg-3
Debian/ghostscriptfrom 0, < 9.06~dfsg-2+deb8u11

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH8.6	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2018-17961
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2018-17961