CVE-2018-17961

HIGH 8.6CVE-2018-17961 · Published 15/10/2018 · updated 17/06/2026

In short

CVE-2018-17961 is a HIGH (CVSS 8.6) vulnerability affecting ghostscript (artifex).
Chance of exploitation in the next 30 days (EPSS): 10.0%, higher than 95.6% of all vulnerabilities.
Fix: update to 9.25 or later.

Package	Affected versions	Patched versions
ghostscript artifex	`< 9.25`	`9.25`

Description

Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.

References

git.ghostscript.com
git.ghostscript.com
git.ghostscript.com
openwall.com/lists/oss-security/2018/10/09/4 · Exploit
access.redhat.com/errata/RHSA-2018:3834 · Third Party Advisory
bugs.chromium.org/p/project-zero/issues/detail · Patch
bugs.ghostscript.com/show_bug.cgi · Permissions Required
lists.debian.org/debian-lts-announce/2018/10/msg00013.html · Mailing List
usn.ubuntu.com/3803-1 · Third Party Advisory
debian.org/security/2018/dsa-4336 · Third Party Advisory
exploit-db.com/exploits/45573 · Exploit

More vulnerabilities in ghostscript

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ghostscript

artifex

< 9.25

9.25

More vulnerabilities in ghostscript

See all →