CVE-2018-16542: Medium severity Artifex Ghostscript vulnerability
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.
Other sources
It was discovered that ghostscript did not properly handle certain stack overflow error conditions. A specially crafted PostScript document could exploit this to crash ghostscript or, possibly, execute arbitrary code in the context of the ghostscript process.
Patch: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=b575e1ec42
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-16542?
CVE-2018-16542 is a vulnerability in Artifex Ghostscript before 9.24 that allows attackers to crash the interpreter by supplying crafted PostScript files with insufficient interpreter stack-size checking during error handling.
What is the severity of CVE-2018-16542?
The severity of CVE-2018-16542 is high, with a severity value of 5.5.
What software is affected by CVE-2018-16542?
Artifex Ghostscript versions before 9.24 are affected, as well as certain versions of Redhat Enterprise Linux, Debian Debian Linux, and Canonical Ubuntu Linux.
How can I fix CVE-2018-16542?
To fix CVE-2018-16542, update Artifex Ghostscript to version 9.24 or later, and update affected Linux distributions to the specified versions.
Where can I find more information about CVE-2018-16542?
More information about CVE-2018-16542 can be found at the provided reference links.