CVE-2018-17183
Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 19 Sept 2018, 15:00
Last modified:05 Aug 2024, 10:39
Vulnerability Summary
Overall Risk (default)
medium
32/100 CVSS Score
7.8 HIGH
v3.0 (nvd)
EPSS Score
1.83% LOW
2% probability +1.06%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
19 Sept 2018, 15:00
Published
Vulnerability first disclosed
05 Aug 2024, 10:39
Last Modified
Vulnerability information updated
Description
Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code.
CVSS Metrics
- v3.0•HIGH•Score: 7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS Trends
Current EPSS score: 1.83%• Percentile: 76%
Affected Systems
- Unknown•Ghostscript
< 9.25
- canonical•ubuntu_linux
14.04 | 16.04 | 18.04
- debian•debian_linux
8.0
- redhat•enterprise_linux_desktop
7.0
- redhat•enterprise_linux_server
7.0
- redhat•enterprise_linux_server_aus
7.6
- redhat•enterprise_linux_server_eus
7.6
- redhat•enterprise_linux_server_tus
7.6
- redhat•enterprise_linux_workstation
7.0