SB2018120314 - Red Hat update for Artifex Ghostscript

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018120314

SB2018120314 - Red Hat update for Artifex Ghostscript

Published: December 3, 2018 Updated: December 3, 2018

Security Bulletin ID SB2018120314
Severity
High
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Improper input validation (CVE-ID: CVE-2018-15908)

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The vulnerability exists due to the bypass of the -dSAFER option. A remote unauthenticated attacker can submit a specially crafted PostScript file, bypass .tempfile restrictions and write files on the targeted system.


2) Improper input validation (CVE-ID: CVE-2018-15909)

The vulnerability allows a remote attacker to bypass implemented security restrictions and execute arbitrary system commands.

The vulnerability exists due to improper input validation when processing malformed PostScript, PDF, EPS, or XPS files. A remote attacker can supply a specially crafted file, bypass -dSAFER restrictions and execute arbitrary commands on vulnerable system.



3) Type confusion (CVE-ID: CVE-2018-16511)

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.

The vulnerability exists due to a type confusion condition in the ztype code. A remote unauthenticated attacker can trick the victim into opening a specially crafted PostScript file that submits malicious input and cause the affected software to crash or execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


4) Improper access control (CVE-ID: CVE-2018-16539)

The vulnerability allows a remote attacker to gain unauthorized access to sensitive information.

The vulnerability exists due to an improper access restrictions when processing PostScript files within the temp directory. A remote attacker can create a specially crafted PostScript file and use it to read arbitrary files on the vulnerable system.


Remediation

Install update from vendor's website.

References