CVE-2018-16863

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.

• CWE-184
• CWE-78

• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=520bb0ea7519
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5516c614dc33
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=78911a01b67d
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=79cccf641486
• https://access.redhat.com/errata/RHSA-2018:3761Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16863Issue Tracking, Patch, Third Party Advisory
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=520bb0ea7519
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5516c614dc33
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=78911a01b67d
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=79cccf641486
• https://access.redhat.com/errata/RHSA-2018:3761Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16863Issue Tracking, Patch, Third Party Advisory

Published

Dec 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16858It was found that libreoffice before versions 6.0.7 and 6.1.…7.8
• CVE-2018-16859Execution of Ansible playbooks on Windows platforms with Pow…4.2
• CVE-2018-1686IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable …5.4
• CVE-2018-16860A flaw was found in samba's Heimdal KDC implementation, vers…7.5
• CVE-2018-16861A cross-site scripting (XSS) flaw was found in the foreman c…7.6
• CVE-2018-16862A security flaw was found in the Linux kernel in a way that …5.3
• CVE-2018-16864An allocation of memory without limits, that could result in…7.8
• CVE-2018-16865An allocation of memory without limits, that could result in…7.8
• CVE-2018-16866An out of bounds read was discovered in systemd-journald in …3.3
• CVE-2018-16867A flaw was found in qemu Media Transfer Protocol (MTP) befor…7.8
• CVE-2018-16868A Bleichenbacher type side-channel based padding oracle atta…5.6
• CVE-2018-16869A Bleichenbacher type side-channel based padding oracle atta…5.7