Critical Vulnerability in Ghostscript: Type Confusion Leading to Potential Code Execution
Summary
ALPINE-CVE-2018-15909: In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code. Affects ghostscript versions < 9.24-r0. Fixed in 9.24-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is widely used for processing and rendering documents in various formats. The package is known for its versatility in handling graphics and text, making it a vital tool in many software applications. However, it has been identified to have a significant vulnerability that could allow attackers to exploit its functionality.
Vulnerability Detail
In Artifex Ghostscript version 9.23, a type confusion vulnerability exists due to improper handling of the .shfill operator. This flaw can be exploited by attackers who supply specially crafted PostScript files, potentially leading to a crash of the interpreter or even arbitrary code execution. The vulnerability is categorized with a CVSS score of 7.8, indicating a high severity level, and it poses a serious risk to systems utilizing this version of Ghostscript.
How To Fix
Minimum fixed version
9.24-r0
This is the first release that contains the fix.
sudo apk add --upgrade ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can avoid processing untrusted PostScript files until the package is updated. Implementing strict file validation and sanitization can also help mitigate the risk of exploitation.
Conclusion
The vulnerability in Ghostscript poses a significant risk due to its potential for exploitation through crafted PostScript files. Users are strongly advised to update to the latest patched version to mitigate this risk. Implementing workarounds can provide temporary relief while ensuring that systems remain secure.
See every vulnerability recorded for ghostscript →
FAQ
The vulnerability is a type confusion issue that can be exploited through crafted PostScript files, potentially leading to crashes or code execution.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, avoid processing untrusted PostScript files and implement file validation to reduce risk.
The CVSS score for this vulnerability is 7.8, indicating a high severity level.
For more information on open-source vulnerabilities, you can visit Vulert at https://vulert.com, which monitors and alerts for vulnerabilities using a manifest file.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
