High 1 exploited CVE ELSA-2017-1230 1 CVE

Important: ghostscript security update (Oracle Linux 7)

Published May 12, 2017 · Updated May 12, 2017

Ecosystem: Oracle Linux

Summary

[8.70-23.el6_9.2]
- Security fix for CVE-2017-8291 updated to address SIGSEGV

[8.70-23.el6_9.1]
- Added security fix for CVE-2017-8291 (bug #1446063)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	ghostscript	0:9.07-20.el7_3.5
Oracle Linux · 7	ghostscript-cups	0:9.07-20.el7_3.5
Oracle Linux · 7	ghostscript-devel	0:9.07-20.el7_3.5
Oracle Linux · 7	ghostscript-doc	0:9.07-20.el7_3.5
Oracle Linux · 7	ghostscript-gtk	0:9.07-20.el7_3.5

Vulnerabilities 1

High 7.8

CVE-2017-8291 Exploited Public exploit EPSS 97%

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion…

ghostscript ghostscript ghostscript Debian Ubuntu Alpine

Apr 27, 2017
KEV May 24, 2022