Summary
Kamil Frankowicz discovered that Ghostscript mishandles references.
A remote attacker could use this to cause a denial of service.
(CVE-2017-11714)
Kim Gwan Yeong discovered that Ghostscript could allow a heap-based buffer
over-read and application crash. A remote attacker could use a crafted
document to cause a denial of service. (CVE-2017-9611, CVE-2017-9726,
CVE-2017-9727, CVE-2017-9739)
Kim Gwan Yeong discovered an use-after-free vulnerability in Ghostscript.
A remote attacker could use a crafted file to cause a denial of service.
(CVE-2017-9612)
Kim Gwan Yeong discovered a lack of integer overflow check in Ghostscript.
A remote attacker could use crafted PostScript document to cause a denial
of service. (CVE-2017-9835)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | ghostscript | 9.10~dfsg-0ubuntu10.10 |
| Ubuntu · 16.04 LTS 16.04:LTS | ghostscript | 9.18~dfsg~0-0ubuntu2.7 |
Vulnerabilities 7
-
Unscored —
psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote atta…
-
Unscored —
The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial…
-
Unscored —
The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial o…
-
Unscored —
The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial…
-
Unscored —
The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause …
-
Unscored —
The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial…
-
Unscored —
The gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial o…
References
-
report
https://ubuntu.com/security/CVE-2017-9611
-
report
https://ubuntu.com/security/CVE-2017-9612
-
report
https://ubuntu.com/security/CVE-2017-9726
-
report
https://ubuntu.com/security/CVE-2017-9727
-
report
https://ubuntu.com/security/CVE-2017-9739
-
report
https://ubuntu.com/security/CVE-2017-9835
-
report
https://ubuntu.com/security/CVE-2017-11714