CVE-2018-18073

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.

• CWE-200

• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=34cc326eb2c5695833361887fe0b32e8d987741c
• http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2018/10/10/12Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3834Third Party Advisory
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1690Issue Tracking, Patch, Third Party Advisory
• https://bugs.ghostscript.com/show_bug.cgi?id=699927Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/10/msg00013.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3803-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4336Third Party Advisory
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=34cc326eb2c5695833361887fe0b32e8d987741c
• http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2018/10/10/12Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3834Third Party Advisory
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1690Issue Tracking, Patch, Third Party Advisory
• https://bugs.ghostscript.com/show_bug.cgi?id=699927Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/10/msg00013.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3803-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4336Third Party Advisory

Published

Oct 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18065_set_key in agent/helpers/table_container.c in Net-SNMP befo…
• CVE-2018-18066snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.…7.5
• CVE-2018-18068The ARM-based hardware debugging feature on Raspberry Pi 3 m…
• CVE-2018-18069process_forms in the WPML (aka sitepress-multilingual-cms) p…
• CVE-2018-18070An issue was discovered in Daimler Mercedes-Benz COMAND 17/1…5.9
• CVE-2018-18071An issue was discovered in the Daimler Mercedes-Benz Me app …
• CVE-2018-18074The Requests package before 2.20.0 for Python sends an HTTP …7.5
• CVE-2018-18075WikidForum 2.20 has SQL Injection via the rpc.php parent_pos…
• CVE-2018-1808IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow s…4.3
• CVE-2018-18082XSS exists in Waimai Super Cms 20150505 via the fname parame…
• CVE-2018-18083An issue was discovered in DuomiCMS 3.0. Remote PHP code exe…
• CVE-2018-18084An issue was discovered in DuomiCMS 3.0. SQL injection exist…9.8