CVE-2018-19409: Critical severity Artifex Ghostscript vulnerability
Published Nov 21, 2018
·Updated
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
Affected Software
14 affected componentsFixes available
redhat/ghostscript<9.26
9.26
Artifex Ghostscript<9.26
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=18.10
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Eus=7.6
redhat Enterprise Linux Workstation=7.0
debian/ghostscript
9.53.3~dfsg-7+deb11u79.53.3~dfsg-7+deb11u1110.0.0~dfsg-11+deb12u810.05.1~dfsg-1+deb13u110.06.0~dfsg-3
Remediation
Event History
Nov 21, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:29 PM
DescriptionSeverityAffected Software
Feb 20, 2026
Data Sourced
via Ubuntu·06:28 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·06:28 PM
DescriptionAffected Software
Data Sourced
via Launchpad·06:28 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-19409?
CVE-2018-19409 is classified as a high severity vulnerability.
2
How do I fix CVE-2018-19409?
To fix CVE-2018-19409, upgrade Artifex Ghostscript to version 9.26 or later.
3
What versions of Ghostscript are affected by CVE-2018-19409?
Ghostscript versions prior to 9.26 are affected by CVE-2018-19409.
4
Is CVE-2018-19409 present in Debian and Ubuntu systems?
Yes, CVE-2018-19409 affects specific versions of Ghostscript on both Debian and Ubuntu systems.
5
What impact does CVE-2018-19409 have on affected software?
CVE-2018-19409 can lead to unauthorized access due to improper safety parameter checks.