CVE-2018-16863 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-16863 Interim 1 60 2025-05-01T01:08:33Z current 2021-05-30T14:16:54Z 2025-05-01T01:08:33Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-16863 It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Liberty Linux 7 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 ghostscript ghostscript-9.07-31.el7_6.3 ghostscript-cups-9.07-31.el7_6.3 ghostscript-devel ghostscript-devel-9.07-31.el7_6.3 ghostscript-doc-9.07-31.el7_6.3 ghostscript-fonts-other ghostscript-fonts-rus ghostscript-fonts-std ghostscript-gtk-9.07-31.el7_6.3 ghostscript-library ghostscript-omni ghostscript-x11 libgimpprint ghostscript-9.07-31.el7_6.3 as a component of SUSE Liberty Linux 7 ghostscript-cups-9.07-31.el7_6.3 as a component of SUSE Liberty Linux 7 ghostscript-devel-9.07-31.el7_6.3 as a component of SUSE Liberty Linux 7 ghostscript-doc-9.07-31.el7_6.3 as a component of SUSE Liberty Linux 7 ghostscript-gtk-9.07-31.el7_6.3 as a component of SUSE Liberty Linux 7 ghostscript as a component of HPE Helion OpenStack 8 ghostscript-devel as a component of HPE Helion OpenStack 8 ghostscript-x11 as a component of HPE Helion OpenStack 8 ghostscript as a component of SUSE CaaS Platform 4.5 ghostscript as a component of SUSE Enterprise Storage 7 ghostscript as a component of SUSE Linux Enterprise Desktop 12 SP3 ghostscript-x11 as a component of SUSE Linux Enterprise Desktop 12 SP3 ghostscript as a component of SUSE Linux Enterprise Desktop 12 SP4 ghostscript-x11 as a component of SUSE Linux Enterprise Desktop 12 SP4 ghostscript as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 ghostscript as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 ghostscript as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS ghostscript-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS ghostscript-x11 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS ghostscript as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS ghostscript-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS ghostscript-x11 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS ghostscript as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS ghostscript-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS ghostscript-x11 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS ghostscript as a component of SUSE Linux Enterprise Module for Basesystem 15 ghostscript-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 ghostscript-x11 as a component of SUSE Linux Enterprise Module for Basesystem 15 ghostscript as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 ghostscript-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 ghostscript-x11 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 ghostscript as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 ghostscript-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 ghostscript-x11 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 ghostscript as a component of SUSE Linux Enterprise Real Time 15 SP2 ghostscript-devel as a component of SUSE Linux Enterprise Real Time 15 SP2 ghostscript-x11 as a component of SUSE Linux Enterprise Real Time 15 SP2 ghostscript-library as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata ghostscript-fonts-other as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-fonts-rus as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-fonts-std as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-library as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-omni as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-x11 as a component of SUSE Linux Enterprise Server 11 SP3 libgimpprint as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-library as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata ghostscript as a component of SUSE Linux Enterprise Server 12 SP1-LTSS ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS ghostscript as a component of SUSE Linux Enterprise Server 12 SP2-BCL ghostscript-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP2-BCL ghostscript as a component of SUSE Linux Enterprise Server 12 SP2-LTSS ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS ghostscript as a component of SUSE Linux Enterprise Server 12 SP3 ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP3 ghostscript as a component of SUSE Linux Enterprise Server 12 SP3-BCL ghostscript-devel as a component of SUSE Linux Enterprise Server 12 SP3-BCL ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP3-BCL ghostscript as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS ghostscript-devel as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS ghostscript as a component of SUSE Linux Enterprise Server 12 SP3-LTSS ghostscript-devel as a component of SUSE Linux Enterprise Server 12 SP3-LTSS ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS ghostscript as a component of SUSE Linux Enterprise Server 12 SP4 ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP4 ghostscript as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS ghostscript-devel as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS ghostscript as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ghostscript-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ghostscript as a component of SUSE Linux Enterprise Server 12 SP5 ghostscript-devel as a component of SUSE Linux Enterprise Server 12 SP5 ghostscript-x11 as a component of SUSE Linux Enterprise Server 12 SP5 ghostscript as a component of SUSE Linux Enterprise Server 12-LTSS ghostscript-x11 as a component of SUSE Linux Enterprise Server 12-LTSS ghostscript as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ghostscript-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ghostscript-x11 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ghostscript as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 ghostscript as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 ghostscript as a component of SUSE Linux Enterprise Server Teradata 12 SP3 ghostscript as a component of SUSE Linux Enterprise Server for SAP Applications 12 ghostscript as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 ghostscript-x11 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 ghostscript as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ghostscript-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ghostscript-x11 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ghostscript as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ghostscript-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ghostscript-x11 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ghostscript as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ghostscript as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 ghostscript-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 ghostscript-x11 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 ghostscript-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 ghostscript as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 ghostscript-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 ghostscript as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 ghostscript as a component of SUSE Manager Proxy 4.1 ghostscript as a component of SUSE Manager Retail Branch Server 4.1 ghostscript as a component of SUSE Manager Server 4.1 ghostscript as a component of SUSE OpenStack Cloud 8 ghostscript-devel as a component of SUSE OpenStack Cloud 8 ghostscript-x11 as a component of SUSE OpenStack Cloud 8 ghostscript as a component of SUSE OpenStack Cloud 9 ghostscript-devel as a component of SUSE OpenStack Cloud 9 ghostscript-x11 as a component of SUSE OpenStack Cloud 9 ghostscript as a component of SUSE OpenStack Cloud Crowbar 8 ghostscript-devel as a component of SUSE OpenStack Cloud Crowbar 8 ghostscript-x11 as a component of SUSE OpenStack Cloud Crowbar 8 ghostscript as a component of SUSE OpenStack Cloud Crowbar 9 ghostscript-devel as a component of SUSE OpenStack Cloud Crowbar 9 ghostscript-x11 as a component of SUSE OpenStack Cloud Crowbar 9 It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7. CVE-2018-16863 SUSE Liberty Linux 7:ghostscript-9.07-31.el7_6.3 SUSE Liberty Linux 7:ghostscript-cups-9.07-31.el7_6.3 SUSE Liberty Linux 7:ghostscript-devel-9.07-31.el7_6.3 SUSE Liberty Linux 7:ghostscript-doc-9.07-31.el7_6.3 SUSE Liberty Linux 7:ghostscript-gtk-9.07-31.el7_6.3 HPE Helion OpenStack 8:ghostscript HPE Helion OpenStack 8:ghostscript-devel HPE Helion OpenStack 8:ghostscript-x11 SUSE CaaS Platform 4.5:ghostscript SUSE Enterprise Storage 7:ghostscript SUSE Linux Enterprise Desktop 12 SP3:ghostscript SUSE Linux Enterprise Desktop 12 SP3:ghostscript-x11 SUSE Linux Enterprise Desktop 12 SP4:ghostscript SUSE Linux Enterprise Desktop 12 SP4:ghostscript-x11 SUSE Linux Enterprise High Performance Computing 12 SP4:ghostscript SUSE Linux Enterprise High Performance Computing 12 SP5:ghostscript SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:ghostscript SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:ghostscript-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:ghostscript-x11 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:ghostscript SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:ghostscript-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:ghostscript-x11 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ghostscript SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ghostscript-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ghostscript-x11 SUSE Linux Enterprise Module for Basesystem 15 SP3:ghostscript SUSE Linux Enterprise Module for Basesystem 15 SP3:ghostscript-devel SUSE Linux Enterprise Module for Basesystem 15 SP3:ghostscript-x11 SUSE Linux Enterprise Module for Basesystem 15 SP4:ghostscript SUSE Linux Enterprise Module for Basesystem 15 SP4:ghostscript-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:ghostscript-x11 SUSE Linux Enterprise Module for Basesystem 15:ghostscript SUSE Linux Enterprise Module for Basesystem 15:ghostscript-devel SUSE Linux Enterprise Module for Basesystem 15:ghostscript-x11 SUSE Linux Enterprise Real Time 15 SP2:ghostscript SUSE Linux Enterprise Real Time 15 SP2:ghostscript-devel SUSE Linux Enterprise Real Time 15 SP2:ghostscript-x11 SUSE Linux Enterprise Server 11 SP3 for Teradata:ghostscript-library SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-other SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-rus SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-std SUSE Linux Enterprise Server 11 SP3:ghostscript-library SUSE Linux Enterprise Server 11 SP3:ghostscript-omni SUSE Linux Enterprise Server 11 SP3:ghostscript-x11 SUSE Linux Enterprise Server 11 SP3:libgimpprint SUSE Linux Enterprise Server 12 SP1-LTSS:ghostscript SUSE Linux Enterprise Server 12 SP1-LTSS:ghostscript-x11 SUSE Linux Enterprise Server 12 SP2-BCL:ghostscript SUSE Linux Enterprise Server 12 SP2-BCL:ghostscript-devel SUSE Linux Enterprise Server 12 SP2-BCL:ghostscript-x11 SUSE Linux Enterprise Server 12 SP2-LTSS:ghostscript SUSE Linux Enterprise Server 12 SP2-LTSS:ghostscript-x11 SUSE Linux Enterprise Server 12 SP3-BCL:ghostscript SUSE Linux Enterprise Server 12 SP3-BCL:ghostscript-devel SUSE Linux Enterprise Server 12 SP3-BCL:ghostscript-x11 SUSE Linux Enterprise Server 12 SP3-ESPOS:ghostscript SUSE Linux Enterprise Server 12 SP3-ESPOS:ghostscript-devel SUSE Linux Enterprise Server 12 SP3-ESPOS:ghostscript-x11 SUSE Linux Enterprise Server 12 SP3-LTSS:ghostscript SUSE Linux Enterprise Server 12 SP3-LTSS:ghostscript-devel SUSE Linux Enterprise Server 12 SP3-LTSS:ghostscript-x11 SUSE Linux Enterprise Server 12 SP3:ghostscript SUSE Linux Enterprise Server 12 SP3:ghostscript-x11 SUSE Linux Enterprise Server 12 SP4-ESPOS:ghostscript SUSE Linux Enterprise Server 12 SP4-ESPOS:ghostscript-devel SUSE Linux Enterprise Server 12 SP4-ESPOS:ghostscript-x11 SUSE Linux Enterprise Server 12 SP4-LTSS:ghostscript SUSE Linux Enterprise Server 12 SP4-LTSS:ghostscript-devel SUSE Linux Enterprise Server 12 SP4-LTSS:ghostscript-x11 SUSE Linux Enterprise Server 12 SP4:ghostscript SUSE Linux Enterprise Server 12 SP4:ghostscript-x11 SUSE Linux Enterprise Server 12 SP5:ghostscript SUSE Linux Enterprise Server 12 SP5:ghostscript-devel SUSE Linux Enterprise Server 12 SP5:ghostscript-x11 SUSE Linux Enterprise Server 12-LTSS:ghostscript SUSE Linux Enterprise Server 12-LTSS:ghostscript-x11 SUSE Linux Enterprise Server 15 SP2-LTSS:ghostscript SUSE Linux Enterprise Server 15 SP2-LTSS:ghostscript-devel SUSE Linux Enterprise Server 15 SP2-LTSS:ghostscript-x11 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:ghostscript SUSE Linux Enterprise Server Business Critical Linux 15 SP2:ghostscript SUSE Linux Enterprise Server Teradata 12 SP3:ghostscript SUSE Linux Enterprise Server for SAP Applications 12 SP2:ghostscript SUSE Linux Enterprise Server for SAP Applications 12 SP2:ghostscript-x11 SUSE Linux Enterprise Server for SAP Applications 12 SP3:ghostscript SUSE Linux Enterprise Server for SAP Applications 12 SP3:ghostscript-devel SUSE Linux Enterprise Server for SAP Applications 12 SP3:ghostscript-x11 SUSE Linux Enterprise Server for SAP Applications 12 SP4:ghostscript SUSE Linux Enterprise Server for SAP Applications 12 SP4:ghostscript-devel SUSE Linux Enterprise Server for SAP Applications 12 SP4:ghostscript-x11 SUSE Linux Enterprise Server for SAP Applications 12 SP5:ghostscript SUSE Linux Enterprise Server for SAP Applications 12:ghostscript SUSE Linux Enterprise Server for SAP Applications 15 SP2:ghostscript SUSE Linux Enterprise Server for SAP Applications 15 SP2:ghostscript-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:ghostscript-x11 SUSE Linux Enterprise Software Development Kit 12 SP3:ghostscript SUSE Linux Enterprise Software Development Kit 12 SP3:ghostscript-devel SUSE Linux Enterprise Software Development Kit 12 SP4:ghostscript SUSE Linux Enterprise Software Development Kit 12 SP4:ghostscript-devel SUSE Manager Proxy 4.1:ghostscript SUSE Manager Retail Branch Server 4.1:ghostscript SUSE Manager Server 4.1:ghostscript SUSE OpenStack Cloud 8:ghostscript SUSE OpenStack Cloud 8:ghostscript-devel SUSE OpenStack Cloud 8:ghostscript-x11 SUSE OpenStack Cloud 9:ghostscript SUSE OpenStack Cloud 9:ghostscript-devel SUSE OpenStack Cloud 9:ghostscript-x11 SUSE OpenStack Cloud Crowbar 8:ghostscript SUSE OpenStack Cloud Crowbar 8:ghostscript-devel SUSE OpenStack Cloud Crowbar 8:ghostscript-x11 SUSE OpenStack Cloud Crowbar 9:ghostscript SUSE OpenStack Cloud Crowbar 9:ghostscript-devel SUSE OpenStack Cloud Crowbar 9:ghostscript-x11 important 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L