Lucene search
F5F5:K01362377HistoryMay 08, 2017 - 12:00 a.m.
K01362377 : Ghostscript vulnerability CVE-2017-8291
2017-05-0800:00:00
my.f5.com
55
Security Advisory Description
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a “/OutputFile (%pipe%” substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017. (CVE-2017-8291)
Impact
There is no impact; F5 products are not affected by this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
redhat
redhat
(RHSA-2017:1230) Important: ghostscript security update
2017-05-12 08:05:57
oraclelinux
oraclelinux
ghostscript security update
2017-05-12 00:00:00
ghostscript security update
2018-12-03 00:00:00
ghostscript security and bug fix update
2017-08-07 00:00:00
nessus
nessus
openvas
openvas
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2017-1101)
2020-01-23 00:00:00
CentOS Update for ghostscript CESA-2017:1230 centos7
2017-05-16 00:00:00
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2017-1100)
2020-01-23 00:00:00
archlinux
archlinux
[ASA-201705-3] ghostscript: arbitrary command execution
2017-05-07 00:00:00
cisa_kev
cisa_kev
Artifex Ghostscript Type Confusion Vulnerability
2022-05-24 00:00:00
cvelist
cvelist
CVE-2017-8291
2017-04-27 01:41:00
suse
suse
Security update for ghostscript-library (important)
2017-05-17 12:09:28
Security update for ghostscript-library (important)
2017-05-03 15:10:11
Security update for ghostscript (important)
2017-05-24 21:13:32
redhatcve
redhatcve
CVE-2017-8291
2017-04-27 08:19:47
ubuntucve
ubuntucve
CVE-2017-8291
2017-04-26 00:00:00
zdt
zdt
Ghostscript 9.21 Type Confusion Arbitrary Command Execution Exploit
2017-05-02 00:00:00
checkpoint_advisories
checkpoint_advisories
Ghostscript Type Confusion Arbitrary Command Execution (CVE-2017-8291)
2017-05-08 00:00:00
osv
osv
ghostscript - security update
2017-05-07 00:00:00
CVE-2017-8291
2017-04-27 01:59:02
ghostscript - security update
2017-04-28 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:16:42
nvd
nvd
CVE-2017-8291
2017-04-27 01:59:02
cve
cve
CVE-2017-8291
2017-04-27 01:59:02
seebug
seebug
Ghostscript remote code execution (CVE-2017-8291)
(ghostbutt)
2017-04-29 00:00:00
thn
thn
Critical Flaws in Ghostscript Could Leave Many Systems at Risk of Hacking
2018-08-22 08:27:00
North Korea's APT37 Targeting Southern Counterpart with New M2RAT Malware
2023-02-15 14:59:00
attackerkb
attackerkb
CVE-2017-8291
2017-04-27 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in ghostscript affects PowerKVM
2018-06-18 01:36:14
prion
prion
Type confusion
2017-04-27 01:59:00
packetstorm
packetstorm
Ghostscript 9.21 Type Confusion Arbitrary Command Execution
2017-05-01 00:00:00
centos
centos
ghostscript security update
2017-05-15 15:59:50
amazon
amazon
Important: ghostscript
2017-06-06 16:51:00
debian
debian
[SECURITY] [DLA 932-1] ghostscript security update
2017-05-07 05:57:50
[SECURITY] [DSA 3838-1] ghostscript security update
2017-04-28 11:51:39
[SECURITY] [DSA 3838-1] ghostscript security update
2017-04-28 11:51:39
hackerone
hackerone
Basecamp: Remote code execution on Basecamp.com
2018-06-13 07:27:51
debiancve
debiancve
CVE-2017-8291
2017-04-27 01:59:02
metasploit
metasploit
Ghostscript Type Confusion Arbitrary Command Execution
2017-04-28 14:56:52
alpinelinux
alpinelinux
CVE-2017-8291
2017-04-27 01:59:02
exploitdb
exploitdb
Ghostscript 9.21 - Type Confusion Arbitrary Command Execution (Metasploit)
2017-05-02 00:00:00
rapid7community
rapid7community
Metasploit Weekly Wrapup
2017-05-05 20:37:48
ubuntu
ubuntu
Ghostscript regression
2017-05-16 00:00:00
Ghostscript vulnerabilities
2017-04-28 00:00:00
gentoo
gentoo
GPL Ghostscript: Multiple vulnerabilities
2017-08-21 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: ghostscript-9.20-10.fc26
2017-05-08 14:25:23
[SECURITY] Fedora 25 Update: ghostscript-9.20-9.fc25
2017-05-07 00:03:32
[SECURITY] Fedora 24 Update: ghostscript-9.20-9.fc24
2017-05-15 04:28:05
mageia
mageia
Updated ghostscript packages fix security vulnerability
2017-05-08 01:16:00