CVE-2018-16509
HIGH 7.8EPSS 92.5%
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.
- CVSS v3.0 NVD
- 7.8 HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 92.50% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2018-09-05
- Updated
- 2024-08-05
Proof-of-concept exploits (7)
- http://seclists.org/oss-sec/2018/q3/142
- AssassinUKG/CVE_2018_165090★ · 2021-06-08
- cved-sources/cve-2018-165090★ · 2021-04-15
- farisv/PIL-RCE-Ghostscript-CVE-2018-1650962★ · 2021-01-06
- knqyf263/CVE-2018-165093★ · 2019-02-01
- rhpco/CVE-2018-165091★ · 2022-11-07
- shelld3v/RCE-python-oneliner-payload32★ · 2021-09-09
Metasploit modules (1)
ExploitDB entries (1)
Vulhub environments (2)
- vulhub/vulhub/tree/master/ghostscript/CVE-2018-16509
- vulhub/vulhub/tree/master/python/PIL-CVE-2018-16509
Security advisories
- https://www.artifex.com/news/ghostscript-security-resolved
- http://www.securityfocus.com/bid/105122
- https://access.redhat.com/errata/RHSA-2018:2918
- https://access.redhat.com/errata/RHSA-2018:3760
- https://bugs.ghostscript.com/show_bug.cgi?id=699654
- https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
- https://security.gentoo.org/glsa/201811-12
- https://usn.ubuntu.com/3768-1
- https://www.debian.org/security/2018/dsa-4294