CVE-2018-16863CWE-184

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509

High · published December 3, 2018

CVSS v3.0
7.3
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01249 · 69.1th percentile
Weakness
CWE-184 · Incomplete List of Disallowed Inputs
Published
2018-12-03T17:00Z
EPSS history
Timeline
  • 03 DEC 17:00Z
    It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509
    cvelistv5