Ghostscript Vulnerability: Sandbox Bypass via Execution Stack Exposure
Summary
ALPINE-CVE-2018-18073: Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object. Affects ghostscript versions < 9.25-r1. Fixed in 9.25-r1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is widely used for processing and rendering documents in various formats. The package is known for its ability to convert files and manage print jobs, making it a critical component in many applications. However, it has been identified to have a vulnerability that allows attackers to bypass its sandbox protection mechanisms.
Vulnerability Detail
Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object. This vulnerability can lead to unauthorized access to system resources, potentially allowing attackers to execute arbitrary code or access sensitive data. The vulnerability is classified under CVE-2018-18073 and has a CVSS score of 6.3, indicating a moderate severity level.
How To Fix
Minimum fixed version
9.25-r1
This is the first release that contains the fix.
sudo apk add --upgrade ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can limit the permissions of the Ghostscript process or run it in a more restrictive environment to mitigate the risk of exploitation until the package can be updated.
Conclusion
The Ghostscript vulnerability CVE-2018-18073 poses a significant risk by allowing attackers to bypass sandbox protections. It is crucial to update to the patched version 9.25-r1 to mitigate this risk. Users should also consider implementing workarounds until the update can be applied.
See every vulnerability recorded for ghostscript →
FAQ
CVE-2018-18073 is a vulnerability in Ghostscript that allows attackers to bypass sandbox protections, potentially leading to unauthorized access to system resources.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score for this vulnerability is 6.3, indicating a moderate severity level.
If you cannot update Ghostscript immediately, consider running it in a restricted environment or limiting its permissions to reduce the risk of exploitation.
You can find more information about Ghostscript vulnerabilities and updates on the official Ghostscript website or security advisories related to the package.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
