Wind River Support Network

HomeDefectsLIN1018-2795

Fixed

LIN1018-2795 : Security Advisory - ghostscript - CVE-2018-17961

Created: Oct 30, 2018 Updated: Sep 13, 2022

Resolved Date: Feb 20, 2019

Found In Version: unknown

Fix Version: 10.18.44.4

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.

https://nvd.nist.gov/vuln/detail/CVE-2018-17961

CVEs

CVE-2018-17961