CVE-2018-16863
Quick assessment
Affected
Artifex ghostscript
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Red Hat Enterprise Linux 7是美国红帽（Red Hat）公司的一套面向企业用户的Linux操作系统。 Red Hat Enterprise Linux 7 存在操作系统命令注入漏洞。该漏洞源于可能会绕过保护，攻击者利用该漏洞可以通过特制的文档执行任意shell命令。
Possible ATT&CK Techniques 1 AI
T1204.001 · Malicious Link
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-16863
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
不完整的黑名单
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat Enterprise Linux 7 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Enterprise Linux 7是美国红帽（Red Hat）公司的一套面向企业用户的Linux操作系统。 Red Hat Enterprise Linux 7 存在操作系统命令注入漏洞。该漏洞源于可能会绕过保护，攻击者利用该漏洞可以通过特制的文档执行任意shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Artifex | ghostscript | 9.07 | - |
|
II. Public POCs for CVE-2018-16863
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-16863
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-16863 (2)
-
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16863 x_refsource_CONFIRM
-
Other References for CVE-2018-16863 (4)
-
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=79cccf641486 x_refsource_CONFIRM
-
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5516c614dc33 x_refsource_CONFIRM
-
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=78911a01b67d x_refsource_CONFIRM
-
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=520bb0ea7519 x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: ghostscript
-
CVE-2026-103226
Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack -
CVE-2026-19547
Local Privilege Escalation in Ghostscript for Windows -
CVE-2026-39919
Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Out -
CVE-2025-59800
Artifex Ghostscript 输入验证错误漏洞 -
CVE-2025-59799
Artifex Ghostscript 安全漏洞
Same vendor: Artifex
-
CVE-2026-103226
Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack -
CVE-2026-92413
Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter -
CVE-2026-7233
Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids -
CVE-2025-15569
Artifex MuPDF win_main.c get_system_dpi uncontrolled search -
CVE-2025-59799
Artifex Ghostscript 安全漏洞
Same weakness: CWE-184
-
CVE-2026-107322
OS command injection in Amazon Agent Plugins for AWS databas -
CVE-2026-106445
Handlebars: JavaScript Injection via Own Property Check Bypa -
CVE-2026-106442
Hydra instantiate target blacklist bypasses permit code exec -
CVE-2026-106218
TeamCity <2026.1.3 Kotlin DSL沙箱逃逸致RCE -
CVE-2026-105648
Ghost: Private IP Filtering Bypass via IPv6 Transition Addre
V. Comments for CVE-2018-16863
No comments yet