Code Injection in Ghostscript - CVE-2018-17183

Vulnerability identifier: #VU15375

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-17183

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to the application allowed a user-writable error exception table. A remote attacker can use a specially crafted PostScript file to overwrite error handlers and inject arbitrary code.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Ghostscript
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Opensuse
Fedora
ghostscript
EMC Cloud Tiering Appliance

Install updates from vendor's website.

Ghostscript - update to 9.25
ghostscript - addressed in versions 9.26-1.fc28, 9.26-1.fc29
EMC Cloud Tiering Appliance - update to 12.1.0.65

• http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=fb713b3818b52d8a6cf62c951eba2e1795ff9624
• https://bugs.ghostscript.com/show_bug.cgi?id=699708

• OpenSUSE Linux update for ghostscript
• OpenSUSE Linux update for ghostscript
• Red Hat update for ghostscript
• Multiple vulnerabilities in Dell EMC Cloud Tiering Appliance Family
• Fedora 29 update for ghostscript
• Fedora 28 update for ghostscript