CVE-2018-16863 Command injection in ghostscript
Attackers can execute arbitrary shell commands via crafted PostScript documents by bypassing Ghostscript's -dSAFER protection.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-16863?
CVE-2018-16863 is a high-severity command injection vulnerability in Artifex Ghostscript, published on 3 Dec 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.
Which versions are affected by CVE-2018-16863?
It affects 7 products.
Linux distribution packages (24)
ghostscript Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.3 |
ghostscript-cups Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.3 |
ghostscript-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.3 |
ghostscript-devel Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.3 |
ghostscript-doc Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.3 |
ghostscript-gtk Red Hat:enterprise_linux:7::client | All versions | 0:9.07-31.el7_6.3 |
ghostscript Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.3 |
ghostscript-cups Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.3 |
ghostscript-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.3 |
ghostscript-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.3 |
ghostscript-doc Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.3 |
ghostscript-gtk Red Hat:enterprise_linux:7::computenode | All versions | 0:9.07-31.el7_6.3 |
ghostscript Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.3 |
ghostscript-cups Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.3 |
ghostscript-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.3 |
ghostscript-devel Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.3 |
ghostscript-doc Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.3 |
ghostscript-gtk Red Hat:enterprise_linux:7::server | All versions | 0:9.07-31.el7_6.3 |
ghostscript Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.3 |
ghostscript-cups Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.3 |
ghostscript-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.3 |
ghostscript-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.3 |
ghostscript-doc Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.3 |
ghostscript-gtk Red Hat:enterprise_linux:7::workstation | All versions | 0:9.07-31.el7_6.3 |
Products include Artifex Ghostscript, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Server Eus, Redhat Enterprise Linux Server Tus and 1 more.
How do I fix CVE-2018-16863?
Apply the vendor's patch.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2018-16863 being exploited?
There is no known exploitation of CVE-2018-16863 in the wild and no public exploit code.
Other vulnerabilities in Artifex Ghostscript
Sources
Also known as GHSA-83g5-f7jm-c8fc, RHSA-2018:3761.