libspectre (SUSE:Linux Enterprise Server 12-LTSS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12-LTSS package libspectre, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2018-19409 — CVSS 9.8 (critical): An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
• CVE-2018-18284 — CVSS 8.6 (high): Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.
• CVE-2018-17961 — CVSS 8.6 (high): Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup…
• CVE-2019-6116 — CVSS 7.8 (high): In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code…
• CVE-2018-17183 — CVSS 7.8 (high): Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply…
• CVE-2018-19475 — CVSS 7.8 (high): psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack…
• CVE-2018-19476 — CVSS 7.8 (high): psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace…
• CVE-2018-19477 — CVSS 7.8 (high): psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode…
• CVE-2018-18073 — CVSS 6.3 (medium): Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved…