Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

SUSE: 2017:1404-1 Important: Ghostscript Remote Command Execution and DoS

suse
Calendar Grey May 24, 2017
Scroller Suse Esm H88
SUSE Security Bulletin for ghostscript resolves severe vulnerabilities and provides guidelines for updating at-risk systems.
An update that fixes 5 vulnerabilities is now available

Summary

This update for ghostscript fixes the following security vulnerabilities: - CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453) - CVE-2016-9601: An integer overflow in the bundled jbig2dec library could have been misused to cause a Denial-of-Service. (bsc#1018128) - CVE-2016-10220: A NULL pointer dereference in the PDF Transparency module allowed remote attackers to cause a Denial-of-Service. (bsc#1032120) - CVE-2017-5951: A NULL pointer dereference allowed remote attackers to cause a denial of service via a crafted PostScript document. (bsc#1032114) - CVE-2017-7207: A NULL pointer dereference allowed remote attackers to cause a denial of service via a crafted PostScript document. (bsc#1030263)

Topics%20covered

Topics Covered

security advisory denial of service ghostscript remote command execution important SUSE Linux Enterprise

References

#1018128 #1030263 #1032114 #1032120 #1036453

Cross- CVE-2016-10220 CVE-2016-9601 CVE-2017-5951

CVE-2017-7207 CVE-2017-8291

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP2

SUSE Linux Enterprise Software Development Kit 12-SP1

SUSE Linux Enterprise Server for SAP 12

SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

SUSE Linux Enterprise Server 12-SP2

SUSE Linux Enterprise Server 12-SP1

SUSE Linux Enterprise Server 12-LTSS

SUSE Linux Enterprise Desktop 12-SP2

SUSE Linux Enterprise Desktop 12-SP1

https://www.suse.com/security/cve/CVE-2016-10220.html

https://www.suse.com/security/cve/CVE-2016-9601.html

https://www.suse.com/security/cve/CVE-2017-5951.html

https://www.suse.com/security/cve/CVE-2017-7207.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:1404-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service ghostscript remote command execution important SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.