The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3834 advisory.

    - Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in       pagedevice replacement (699664)
    - Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error       exception table
    - Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks       can leak operator arrays
    - Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks       can leak operator arrays (incomplete fix for CVE-2018-17183)
    - Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator       allows a sandbox protection bypass
    - Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in       setpattern (700141)
    - Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory       access in the aesdecode operator (699665)
    - Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect 'restoration of       privilege' checking when running out of stack during exception handling

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : ghostscript (ELSA-2018-3834)

critical Nessus Plugin ID 119757

Version 1.10