CVE-2018-16513

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact.

• CWE-704

• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=b326a71659b7837d3acde954b18bda1a6f5e9498
• https://bugs.ghostscript.com/show_bug.cgi?id=699655Issue Tracking, Permissions Required, Vendor Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00015.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201811-12Third Party Advisory
• https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/3768-1/Third Party Advisory
• https://www.artifex.com/news/ghostscript-security-resolved/Patch, Vendor Advisory
• https://www.debian.org/security/2018/dsa-4288Third Party Advisory
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=b326a71659b7837d3acde954b18bda1a6f5e9498
• https://bugs.ghostscript.com/show_bug.cgi?id=699655Issue Tracking, Permissions Required, Vendor Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00015.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201811-12Third Party Advisory
• https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/3768-1/Third Party Advisory
• https://www.artifex.com/news/ghostscript-security-resolved/Patch, Vendor Advisory
• https://www.debian.org/security/2018/dsa-4288Third Party Advisory

Published

Sep 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16498In Versa Director, the unencrypted backup files stored on th…5.5
• CVE-2018-16499In VOS compromised, an attacker at network endpoints can pos…5.9
• CVE-2018-1650IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials whic…5.9
• CVE-2018-16509An issue was discovered in Artifex Ghostscript before 9.24. …
• CVE-2018-16510An issue was discovered in Artifex Ghostscript before 9.24. …
• CVE-2018-16511An issue was discovered in Artifex Ghostscript before 9.24. …
• CVE-2018-16514A cross-site scripting (XSS) vulnerability in the View Filte…
• CVE-2018-16515Matrix Synapse before 0.33.3.1 allows remote attackers to sp…
• CVE-2018-16516helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a craf…
• CVE-2018-16517asm/labels.c in Netwide Assembler (NASM) is prone to NULL Po…5.5
• CVE-2018-16518A directory traversal vulnerability with remote code executi…
• CVE-2018-16519COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS…