The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3834 advisory.

    - Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in       pagedevice replacement (699664)
    - Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error       exception table
    - Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks       can leak operator arrays
    - Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks       can leak operator arrays (incomplete fix for CVE-2018-17183)
    - Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator       allows a sandbox protection bypass
    - Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in       setpattern (700141)
    - Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory       access in the aesdecode operator (699665)
    - Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect 'restoration of       privilege' checking when running out of stack during exception handling

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : ghostscript (ELSA-2018-3834)

critical Nessus Plugin ID 119757

Version 1.11

Version 1.10

Version 1.9

Version 1.11 Nov 1, 2024, 11:44 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202411012344
Version 1.10 Oct 23, 2024, 10:51 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410232251
Version 1.9 Jul 15, 2024, 7:53 AM CVSSv2 score source (set to "CVE-2018-19409") Plugin Feed: 202407150753