UbuntuUSN-3403-1Ghostscript vulnerabilities
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
80.9%
Releases
- Ubuntu 17.04
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- ghostscript - PostScript and PDF interpreter
Details
Kamil Frankowicz discovered that Ghostscript mishandles references.
A remote attacker could use this to cause a denial of service.
(CVE-2017-11714)
Kim Gwan Yeong discovered that Ghostscript could allow a heap-based buffer
over-read and application crash. A remote attacker could use a crafted
document to cause a denial of service. (CVE-2017-9611, CVE-2017-9726,
CVE-2017-9727, CVE-2017-9739)
Kim Gwan Yeong discovered an use-after-free vulnerability in Ghostscript.
A remote attacker could use a crafted file to cause a denial of service.
(CVE-2017-9612)
Kim Gwan Yeong discovered a lack of integer overflow check in Ghostscript.
A remote attacker could use crafted PostScript document to cause a denial
of service. (CVE-2017-9835)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 17.04 | noarch | ghostscript | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ghostscript-dbg | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ghostscript-dbgsym | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ghostscript-doc | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ghostscript-x | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ghostscript-x-dbgsym | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libgs-dev | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libgs-dev-dbgsym | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libgs9 | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libgs9-common | < 9.19~dfsg+1-0ubuntu7.6 | UNKNOWN |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
80.9%