CVE-2018-15911

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-908

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=8e9ce5016db968b40e4ec255a3005f2786cce45f
http://www.securityfocus.com/bid/105122Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:3834Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=699665Permissions Required, Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00015.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/201811-12Third Party Advisory
https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/3768-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4288Third Party Advisory
https://www.kb.cert.org/vuls/id/332928Patch, Third Party Advisory, US Government Resource
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=8e9ce5016db968b40e4ec255a3005f2786cce45f
http://www.securityfocus.com/bid/105122Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:3834Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=699665Permissions Required, Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00015.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/201811-12Third Party Advisory
https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/3768-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4288Third Party Advisory
https://www.kb.cert.org/vuls/id/332928Patch, Third Party Advisory, US Government Resource

Timeline

Published: Aug 28, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-159127.8An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove ar CVE-2018-159136.1An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera Manager uses a 'returnUrl' parameter to redirec CVE-2018-159175.4Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language CVE-2018-159185.4An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify CVE-2018-159195.3Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a targ CVE-2018-159207.8Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after f CVE-2018-159225.5Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun CVE-2018-159235.5Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun CVE-2018-159247.8Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after f CVE-2018-159255.5Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun CVE-2018-159265.5Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun CVE-2018-159275.5Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun