Lucene search
PRIOn knowledge basePRION:CVE-2016-8602HistoryApr 14, 2017 - 6:59 p.m.
Design/Logic Flaw
2017-04-1418:59:00
PRIOn knowledge base
www.prio-n.com
5
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ghostscript | le | 9.20 |
References
git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=f5c7555c303
rhn.redhat.com/errata/RHSA-2017-0013.html
rhn.redhat.com/errata/RHSA-2017-0014.html
www.debian.org/security/2016/dsa-3691
www.openwall.com/lists/oss-security/2016/10/11/5
www.openwall.com/lists/oss-security/2016/10/11/7
www.securityfocus.com/bid/95311
bugs.ghostscript.com/show_bug.cgi?id=697203
bugzilla.redhat.com/show_bug.cgi?id=1383940
ghostscript.com/doc/9.21/History9.htm
security.gentoo.org/glsa/201702-31
Related
nessus
nessus
SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2016:2654-1)
2016-10-27 00:00:00
SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2016:2723-1)
2016-11-07 00:00:00
openSUSE Security Update : ghostscript (openSUSE-2016-1258)
2016-11-04 00:00:00
ubuntucve
ubuntucve
CVE-2016-8602
2016-10-12 00:00:00
debiancve
debiancve
CVE-2016-8602
2017-04-14 18:59:00
cve
cve
CVE-2016-8602
2017-04-14 18:59:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:2723-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2654-1)
2021-04-19 00:00:00
Fedora Update for ghostscript FEDORA-2016-62f2b66ed1
2016-12-07 00:00:00
cvelist
cvelist
CVE-2016-8602
2017-04-14 18:00:00
nvd
nvd
CVE-2016-8602
2017-04-14 18:59:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:08:18
redhatcve
redhatcve
CVE-2016-8602
2016-10-14 13:47:23
fedora
fedora
[SECURITY] Fedora 23 Update: ghostscript-9.20-5.fc23
2016-11-24 08:27:12
[SECURITY] Fedora 25 Update: ghostscript-9.20-4.fc25
2016-11-19 21:46:37
[SECURITY] Fedora 24 Update: ghostscript-9.20-5.fc24
2016-11-07 23:34:21
amazon
amazon
Medium: ghostscript
2017-01-10 18:00:00
redhat
redhat
(RHSA-2017:0014) Moderate: ghostscript security update
2017-01-04 09:03:43
(RHSA-2017:0013) Moderate: ghostscript security update
2017-01-04 09:03:32
oraclelinux
oraclelinux
ghostscript security update
2017-01-04 00:00:00
ghostscript security update
2017-01-04 00:00:00
ghostscript security and bug fix update
2017-08-07 00:00:00
centos
centos
ghostscript security update
2017-01-04 10:39:19
ghostscript security update
2017-01-04 10:40:05
suse
suse
Security update for ghostscript (important)
2016-10-26 18:06:44
f5
f5
ibm
ibm
Security Bulletin: Vulnerabilities in Ghostscript affect PowerKVM
2018-06-18 01:35:03
gentoo
gentoo
GPL Ghostscript: Multiple vulnerabilities
2017-02-22 00:00:00
debian
debian
[SECURITY] [DSA 3691-1] ghostscript security update
2016-10-12 14:42:24
[SECURITY] [DSA 3691-1] ghostscript security update
2016-10-12 14:42:24
[SECURITY] [DLA 674-1] ghostscript security update
2016-10-25 03:33:12
ubuntu
ubuntu
Ghostscript vulnerabilities
2016-12-02 00:00:00
mageia
mageia
Updated ghostscript packages fix security vulnerability
2017-05-08 01:16:00