CVE-2018-16863 - CVE House
Back to Database
Status published High CVE-2018-16863

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509....

Vulnerability Description

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-16863

Credits & Attribution

No credits recorded in the NVD database.

References

More from Artifex

View All →
CVE-2025-7462
Artifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereference
Medium 5.3
CVE-2025-59801
In Artifex GhostXPS before 10.06.0, there is a stack-based buffer...
Medium 4.3
CVE-2025-59800
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an...
Medium 4.3
CVE-2025-59799
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in...
Medium 4.3
CVE-2025-59798
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in...
Medium 4.3

Affected Vendor

Affected Software

ghostscript
Vulnerable Versions:
9.07

Timeline

Official Publish: December 3rd, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-184

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.