CVE-2018-18284 | SynScan

Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2018-18284

Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.

Published: Oct 20, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-18284
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.6
AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
artifex / ghostscript	-	9.25.x
debian / debian_linux	8.0	8.0.x
debian / debian_linux	9.0	9.0.x
canonical / ubuntu_linux	16.04	16.04.x
canonical / ubuntu_linux	14.04	14.04.x
canonical / ubuntu_linux	18.04	18.04.x
canonical / ubuntu_linux	18.10	18.10.x
artifex / gpl_ghostscript	-	9.26
redhat / enterprise_linux_desktop	7.0	7.0.x
redhat / enterprise_linux_workstation	7.0	7.0.x
redhat / enterprise_linux_server	7.0	7.0.x
redhat / enterprise_linux_server_tus	7.6	7.6.x
redhat / enterprise_linux_server_eus	7.6	7.6.x
redhat / enterprise_linux_server_aus	7.6	7.6.x
pulsesecure / pulse_connect_secure	9.0r1	9.0r3.4
pulsesecure / pulse_connect_secure	8.2r1.0	8.2r12.1
pulsesecure / pulse_connect_secure	8.3r1	8.3r7.1