CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the…

published June 1, 2018

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02582 · 85.1th percentile
Published
2018-06-01T12:00Z
EPSS history
Timeline
  • 01 JUN 12:00Z
    psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the…
    cvelistv5