Updated ghostscript packages fix security vulnerabilities

🗓️ 05 Oct 2017 20:08:40Reported by Gentoo FoundationType

Updated ghostscript packages fix security vulnerabilities. The Ins_MIRP, Ins_IP, Ins_MDRP, gx_ttfReader__Read, Ins_JMPR functions have vulnerabilities allowing remote attackers to cause denial of service or unspecified impact via crafted documents. The gs_alloc_ref_array function allows remote attackers to cause denial of service or unspecified impact via a crafted PostScript document. psi/ztoken.c mishandles references to the scanner state structure, allowing remote attackers to cause denial of service or unspecified impact via a crafted PostScript document

Reporter	Title	Published	Views	Family All 170
ATTACKERKB	CVE-2017-9611	26 Jul 201719:29	–	attackerkb
ATTACKERKB	CVE-2017-9612	26 Jul 201719:29	–	attackerkb
CNVD	Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22385)	27 Jul 201700:00	–	cnvd
CNVD	Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22387)	27 Jul 201700:00	–	cnvd
CNVD	Artifex Ghostscript GhostXPS Denial of Service Vulnerability (CNVD-2017-22388)	27 Jul 201700:00	–	cnvd
CNVD	Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22392)	27 Jul 201700:00	–	cnvd
CNVD	Artifex Ghostscript GhostXPS heap buffer overflow vulnerability (CNVD-2017-22393)	27 Jul 201700:00	–	cnvd
CNVD	Artifex Ghostscript 'gs_alloc_ref_array' function heap buffer overflow vulnerability	27 Jul 201700:00	–	cnvd
CNVD	Artifex Ghostscript psi/ztoken.c File Denial of Service Vulnerability	31 Jul 201700:00	–	cnvd
CVE	CVE-2017-11714	28 Jul 201705:00	–	cve

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	5	any	ghostscript	9.20-1.1	ghostscript-9.20-1.1.noarch.rpm
Mageia	6	any	ghostscript	9.20-3.1	ghostscript-9.20-3.1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
usn	www.usn.ubuntu.com/usn/usn-3403-1/

05 Oct 2017 20:08Current

6.5Medium risk

Vulners AI Score6.5

CVSS 26.8

CVSS 37.8

CVSS 3.17.8

EPSS0.0129