Description
In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://access.redhat.com/errata/RHSA-2018:3650 ↗
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0d3901189f245232f0161addf215d7268c4d05a3 ↗
- https://security.gentoo.org/glsa/201811-12 ↗
- https://usn.ubuntu.com/3768-1/ ↗
- https://www.kb.cert.org/vuls/id/332928 ↗
- https://www.debian.org/security/2018/dsa-4288 ↗
- https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html ↗