In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.
The product uses or accesses a resource that has not been initialized.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Debian_linux | Debian | 8.0 (including) | 8.0 (including) |
| Debian_linux | Debian | 9.0 (including) | 9.0 (including) |
| Ghostscript | Ubuntu | bionic | * |
| Ghostscript | Ubuntu | devel | * |
| Ghostscript | Ubuntu | trusty | * |
| Ghostscript | Ubuntu | upstream | * |
| Ghostscript | Ubuntu | xenial | * |
| Red Hat Enterprise Linux 7 | RedHat | ghostscript-0:9.07-31.el7_6.6 | * |