Search for vulnerabilities
Vulnerability details: VCID-ms4x-35a2-mqhc
Vulnerability ID VCID-ms4x-35a2-mqhc
Aliases CVE-2018-17961
Summary Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.
Status Published
Exploitability 2.0
Weighted Severity 8.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-460 Improper Cleanup on Thrown Exception
CWE-209 Generation of Error Message Containing Sensitive Information
System Score Found at
cvssv3 7.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17961.json
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14485 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
epss 0.14717 https://api.first.org/data/v1/epss?cve=CVE-2018-17961
cvssv3 5.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2018-17961
cvssv3 8.6 https://nvd.nist.gov/vuln/detail/CVE-2018-17961
archlinux High https://security.archlinux.org/AVG-786
Reference id Reference type URL
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=a54c9e61e7d0
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=a5a9bf8c6a63
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=a6807394bd94
https://access.redhat.com/errata/RHSA-2018:3834
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17961.json
https://api.first.org/data/v1/epss?cve=CVE-2018-17961
https://bugs.ghostscript.com/show_bug.cgi?id=699816
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11645
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17961
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18073
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18284
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://lists.debian.org/debian-lts-announce/2018/10/msg00013.html
https://www.debian.org/security/2018/dsa-4336
https://www.exploit-db.com/exploits/45573/
http://www.openwall.com/lists/oss-security/2018/10/09/4
1642578 https://bugzilla.redhat.com/show_bug.cgi?id=1642578
910678 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=910678
ASA-201811-3 https://security.archlinux.org/ASA-201811-3
AVG-786 https://security.archlinux.org/AVG-786
cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
CVE-2018-17961 Exploit https://bugs.chromium.org/p/project-zero/issues/detail?id=1682&desc=2
CVE-2018-17961 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/45573.txt
CVE-2018-17961 https://nvd.nist.gov/vuln/detail/CVE-2018-17961
USN-3803-1 https://usn.ubuntu.com/3803-1/
Data source Exploit-DB
Date added Oct. 9, 2018
Description ghostscript - executeonly Bypass with errorhandler Setup
Ransomware campaign use Known
Source publication date Oct. 9, 2018
Exploit type local
Platform linux
Source update date Oct. 9, 2018
Source URL https://bugs.chromium.org/p/project-zero/issues/detail?id=1682&desc=2
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17961.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2018-17961
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2018-17961
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.94156
EPSS Score 0.14485
Published At July 31, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:34:48.465672+00:00 Alpine Linux Importer Import https://secdb.alpinelinux.org/v3.22/main.json 37.0.0