Red Hat Security AdvisoryRHSA-2017:0013
ghostscript security update
Released 2017-01-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ghostscript-9.07-20.el7_3.1, ghostscript-cups-9.07-20.el7_3.1
- Red Hat Enterprise Linux Client Optional (v. 7) ghostscript-devel-9.07-20.el7_3.1, ghostscript-doc-9.07-20.el7_3.1, ghostscript-gtk-9.07-20.el7_3.1
- Red Hat Enterprise Linux ComputeNode (v. 7) ghostscript-9.07-20.el7_3.1, ghostscript-cups-9.07-20.el7_3.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ghostscript-devel-9.07-20.el7_3.1, ghostscript-doc-9.07-20.el7_3.1, ghostscript-gtk-9.07-20.el7_3.1
- Red Hat Enterprise Linux Server (v. 7) ghostscript-9.07-20.el7_3.1, ghostscript-9.07-20.el7_3.1.ppc, ghostscript-cups-9.07-20.el7_3.1 +2
- Red Hat Enterprise Linux Server Optional (v. 7) ghostscript-devel-9.07-20.el7_3.1, ghostscript-doc-9.07-20.el7_3.1, ghostscript-gtk-9.07-20.el7_3.1
- Red Hat Enterprise Linux Workstation (v. 7) ghostscript-9.07-20.el7_3.1, ghostscript-cups-9.07-20.el7_3.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) ghostscript-devel-9.07-20.el7_3.1, ghostscript-doc-9.07-20.el7_3.1, ghostscript-gtk-9.07-20.el7_3.1
Fixes 5 records
Priority MEDIUM 51
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06419 · Published 2017-05-23 · Partial fix CWE-704
Priority MEDIUM 50
Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05527 · Published 2017-05-23 · Fixed CWE-416
Priority MEDIUM 40
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.03212 · Published 2017-04-14 · Partial fix CWE-704
Priority LOW 32
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.04566 · Published 2017-05-23 · Partial fix CWE-200
Priority LOW 29
The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01957 · Published 2017-03-07 · Partial fix CWE-200
THREATIST.IORead the docs