CVE-2018-19409: Critical severity Artifex Ghostscript vulnerability
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/ghostscriptto a version that resolves this vulnerability.Fixed in 9.26 - Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 9.53.3~dfsg-7+deb11u7Fixed in 9.53.3~dfsg-7+deb11u11Fixed in 10.0.0~dfsg-11+deb12u8Fixed in 10.05.1~dfsg-1+deb13u1Fixed in 10.06.0~dfsg-3 - Upgrade
Upgrade
alpine/ghostscriptto a version that resolves this vulnerability.Fixed in 9.26-r0 - Upgrade
Upgrade
Artifex Ghostscriptto a version that resolves this vulnerability.Fixed in 9.26
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19409?
CVE-2018-19409 is classified as a high severity vulnerability.
How do I fix CVE-2018-19409?
To fix CVE-2018-19409, upgrade Artifex Ghostscript to version 9.26 or later.
What versions of Ghostscript are affected by CVE-2018-19409?
Ghostscript versions prior to 9.26 are affected by CVE-2018-19409.
Is CVE-2018-19409 present in Debian and Ubuntu systems?
Yes, CVE-2018-19409 affects specific versions of Ghostscript on both Debian and Ubuntu systems.
What impact does CVE-2018-19409 have on affected software?
CVE-2018-19409 can lead to unauthorized access due to improper safety parameter checks.