Lucene search

DebianDEBIAN:DLA-905-1:29822

HistoryApr 20, 2017 - 1:44 p.m.

[SECURITY] [DLA 905-1] ghostscript security update

2017-04-2013:44:40

lists.debian.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.6%

JSON

Package : ghostscript
Version : 9.05~dfsg-6.3+deb7u5
CVE ID : CVE-2016-10219 CVE-2016-10220 CVE-2017-5951

ghostscript is vulnerable to multiple issues that can lead
to denial of service when processing untrusted content.

CVE-2016-10219

Application crash with division by 0 in scan conversion code triggered
through crafted content.

CVE-2016-10220

Application crash with a segfault in gx_device_finalize() triggered
through crafted content.

CVE-2017-5951

Application crash with a segfault in ref_stack_index() triggered
through crafted content.

For Debian 7 "Wheezy", these problems have been fixed in version
9.05~dfsg-6.3+deb7u5.

We recommend that you upgrade your ghostscript packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

–
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian8amd64libgs9< 9.06~dfsg-2+deb8u5libgs9_9.06~dfsg-2+deb8u5_amd64.deb
Debian8armhflibgs-dev< 9.06~dfsg-2+deb8u5libgs-dev_9.06~dfsg-2+deb8u5_armhf.deb
Debian8kfreebsd-amd64libgs-dev< 9.06~dfsg-2+deb8u5libgs-dev_9.06~dfsg-2+deb8u5_kfreebsd-amd64.deb
Debian7i386ghostscript-dbg< 9.05~dfsg-6.3+deb7u5ghostscript-dbg_9.05~dfsg-6.3+deb7u5_i386.deb
Debian8armellibgs-dev< 9.06~dfsg-2+deb8u5libgs-dev_9.06~dfsg-2+deb8u5_armel.deb
Debian8arm64ghostscript< 9.06~dfsg-2+deb8u5ghostscript_9.06~dfsg-2+deb8u5_arm64.deb
Debian7armhfghostscript-x< 9.05~dfsg-6.3+deb7u5ghostscript-x_9.05~dfsg-6.3+deb7u5_armhf.deb
Debian7amd64ghostscript< 9.05~dfsg-6.3+deb7u5ghostscript_9.05~dfsg-6.3+deb7u5_amd64.deb
Debian7armhfghostscript< 9.05~dfsg-6.3+deb7u5ghostscript_9.05~dfsg-6.3+deb7u5_armhf.deb
Debian7amd64libgs-dev< 9.05~dfsg-6.3+deb7u5libgs-dev_9.05~dfsg-6.3+deb7u5_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	amd64	libgs9	< 9.06~dfsg-2+deb8u5	libgs9_9.06~dfsg-2+deb8u5_amd64.deb
Debian	8	armhf	libgs-dev	< 9.06~dfsg-2+deb8u5	libgs-dev_9.06~dfsg-2+deb8u5_armhf.deb
Debian	8	kfreebsd-amd64	libgs-dev	< 9.06~dfsg-2+deb8u5	libgs-dev_9.06~dfsg-2+deb8u5_kfreebsd-amd64.deb
Debian	7	i386	ghostscript-dbg	< 9.05~dfsg-6.3+deb7u5	ghostscript-dbg_9.05~dfsg-6.3+deb7u5_i386.deb
Debian	8	armel	libgs-dev	< 9.06~dfsg-2+deb8u5	libgs-dev_9.06~dfsg-2+deb8u5_armel.deb
Debian	8	arm64	ghostscript	< 9.06~dfsg-2+deb8u5	ghostscript_9.06~dfsg-2+deb8u5_arm64.deb
Debian	7	armhf	ghostscript-x	< 9.05~dfsg-6.3+deb7u5	ghostscript-x_9.05~dfsg-6.3+deb7u5_armhf.deb
Debian	7	amd64	ghostscript	< 9.05~dfsg-6.3+deb7u5	ghostscript_9.05~dfsg-6.3+deb7u5_amd64.deb
Debian	7	armhf	ghostscript	< 9.05~dfsg-6.3+deb7u5	ghostscript_9.05~dfsg-6.3+deb7u5_armhf.deb
Debian	7	amd64	libgs-dev	< 9.05~dfsg-6.3+deb7u5	libgs-dev_9.05~dfsg-6.3+deb7u5_amd64.deb