CVE-2018-18284 · cross-distro fix matrix

CVE-2018-18284: Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.

Affects 8 Linux releases across 8 (distro × package) combinations.

Elevated exploitation risk

FIRST EPSS puts CVE-2018-18284's probability of exploitation in the next 30 days at 16% (97th percentile of all CVEs)— well above the noise floor. Prioritize it.

EPSS:16% · 30-day exploit probability97th percentile

Fix per ecosystem

Each block below is a distro release where CVE-2018-18284 has a known fix. Run the listed command on that distro to remediate.

Debian bullseye

Source: Debian Security Tracker

ghostscript→ fixed in9.25~dfsg-3urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y ghostscript
```

Debian bookworm

Source: Debian Security Tracker

ghostscript→ fixed in9.25~dfsg-3urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y ghostscript
```

Debian trixie

Source: Debian Security Tracker

ghostscript→ fixed in9.25~dfsg-3urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y ghostscript
```