Red Hat Security AdvisoryRHSA-2017:0014
ghostscript security update
Released 2017-01-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ghostscript-8.70-21.el6_8.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) ghostscript-devel-8.70-21.el6_8.1, ghostscript-doc-8.70-21.el6_8.1, ghostscript-gtk-8.70-21.el6_8.1
- Red Hat Enterprise Linux HPC Node (v. 6) ghostscript-8.70-21.el6_8.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ghostscript-devel-8.70-21.el6_8.1, ghostscript-doc-8.70-21.el6_8.1, ghostscript-gtk-8.70-21.el6_8.1
- Red Hat Enterprise Linux Server (v. 6) ghostscript-8.70-21.el6_8.1, ghostscript-8.70-21.el6_8.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) ghostscript-devel-8.70-21.el6_8.1, ghostscript-devel-8.70-21.el6_8.1.ppc, ghostscript-doc-8.70-21.el6_8.1 +1
- Red Hat Enterprise Linux Workstation (v. 6) ghostscript-8.70-21.el6_8.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) ghostscript-devel-8.70-21.el6_8.1, ghostscript-doc-8.70-21.el6_8.1, ghostscript-gtk-8.70-21.el6_8.1
Fixes 4 records
Priority MEDIUM 51
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06419 · Published 2017-05-23 · Partial fix CWE-704
Priority MEDIUM 40
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.03212 · Published 2017-04-14 · Partial fix CWE-704
Priority LOW 32
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.04566 · Published 2017-05-23 · Partial fix CWE-200
Priority LOW 29
The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01957 · Published 2017-03-07 · Partial fix CWE-200
THREATIST.IORead the docs