Test ID:	1.3.6.1.4.1.25623.1.1.2.2019.1022
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2019-1022)
Summary:	The remote host is missing an update for the Huawei EulerOS 'ghostscript' package(s) announced via the EulerOS-SA-2019-1022 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'ghostscript' package(s) announced via the EulerOS-SA-2019-1022 advisory. Vulnerability Insight: ghostscript: Incorrect 'restoration of privilege' checking when running out of stack during exception handling (CVE-2018-16802) ghostscript: User-writable error exception table (CVE-2018-17183) ghostscript: Saved execution stacks can leak operator arrays (incomplete fix for CVE-2018-17183) (CVE-2018-17961) ghostscript: Saved execution stacks can leak operator arrays (CVE-2018-18073) ghostscript: 1Policy operator allows a sandbox protection bypass (CVE-2018-18284) ghostscript: Type confusion in setpattern (700141) (CVE-2018-19134) ghostscript: Improperly implemented security check in zsetdevice function in psi/zdevice.c (CVE-2018-19409) ghostscript: Uninitialized memory access in the aesdecode operator (699665) (CVE-2018-15911) ghostscript: incomplete fix for CVE-2018-16509 (CVE-2018-16863) ghostscript: gssetresolution and gsgetresolution memory corruption(CVE-2018-16543) ghostscript: use-after-free in copydevice handling(CVE-2018-16540) Affected Software/OS: 'ghostscript' package(s) on Huawei EulerOS V2.0SP3. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-15911 BugTraq ID: 105122 http://www.securityfocus.com/bid/105122 Debian Security Information: DSA-4288 (Google Search) https://www.debian.org/security/2018/dsa-4288 https://security.gentoo.org/glsa/201811-12 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=8e9ce5016db968b40e4ec255a3005f2786cce45f https://bugs.ghostscript.com/show_bug.cgi?id=699665 https://www.kb.cert.org/vuls/id/332928 https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html RedHat Security Advisories: RHSA-2018:3834 https://access.redhat.com/errata/RHSA-2018:3834 https://usn.ubuntu.com/3768-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-16540 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=c432131c3fdb2143e148e8ba88555f7f7a63b25e https://bugs.ghostscript.com/show_bug.cgi?id=699661 https://www.artifex.com/news/ghostscript-security-resolved/ RedHat Security Advisories: RHBA-2019:0327 https://access.redhat.com/errata/RHBA-2019:0327 RedHat Security Advisories: RHSA-2019:0229 https://access.redhat.com/errata/RHSA-2019:0229 Common Vulnerability Exposure (CVE) ID: CVE-2018-16543 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=5b5536fa88a9e885032bc0df3852c3439399a5c0 https://bugs.ghostscript.com/show_bug.cgi?id=699670 https://lists.debian.org/debian-lts-announce/2018/09/msg00038.html Common Vulnerability Exposure (CVE) ID: CVE-2018-16802 Debian Security Information: DSA-4294 (Google Search) https://www.debian.org/security/2018/dsa-4294 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=3e5d316b72e3965b7968bb1d96baa137cd063ac6 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=643b24dbd002fb9c131313253c307cf3951b3d47 https://seclists.org/oss-sec/2018/q3/229 https://seclists.org/oss-sec/2018/q3/228 Common Vulnerability Exposure (CVE) ID: CVE-2018-16863 RHSA-2018:3761 https://access.redhat.com/errata/RHSA-2018:3761 http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=520bb0ea7519 http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5516c614dc33 http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=78911a01b67d http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=79cccf641486 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16863 Common Vulnerability Exposure (CVE) ID: CVE-2018-17183 http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=fb713b3818b52d8a6cf62c951eba2e1795ff9624 https://bugs.ghostscript.com/show_bug.cgi?id=699708 https://usn.ubuntu.com/3773-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-17961 Debian Security Information: DSA-4336 (Google Search) https://www.debian.org/security/2018/dsa-4336 https://www.exploit-db.com/exploits/45573/ https://bugs.chromium.org/p/project-zero/issues/detail?id=1682&desc=2 https://lists.debian.org/debian-lts-announce/2018/10/msg00013.html http://www.openwall.com/lists/oss-security/2018/10/09/4 https://usn.ubuntu.com/3803-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-18073 http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.html https://bugs.chromium.org/p/project-zero/issues/detail?id=1690 http://www.openwall.com/lists/oss-security/2018/10/10/12 Common Vulnerability Exposure (CVE) ID: CVE-2018-18284 BugTraq ID: 107451 http://www.securityfocus.com/bid/107451 https://bugs.chromium.org/p/project-zero/issues/detail?id=1696 https://bugs.ghostscript.com/show_bug.cgi?id=699963 http://www.openwall.com/lists/oss-security/2018/10/16/2 Common Vulnerability Exposure (CVE) ID: CVE-2018-19134 BugTraq ID: 106278 http://www.securityfocus.com/bid/106278 https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf https://lists.debian.org/debian-lts-announce/2018/12/msg00019.html Common Vulnerability Exposure (CVE) ID: CVE-2018-19409 BugTraq ID: 105990 http://www.securityfocus.com/bid/105990 Debian Security Information: DSA-4346 (Google Search) https://www.debian.org/security/2018/dsa-4346 https://bugs.ghostscript.com/show_bug.cgi?id=700176 https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=661e8d8fb8248c38d67958beda32f3a5876d0c3f https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26 https://lists.debian.org/debian-lts-announce/2018/11/msg00036.html https://usn.ubuntu.com/3831-1/
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.