CVE-2018-15911 on Ubuntu 14.04 LTS (trusty) - medium.
Description:
In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.