Upstream information
Description
The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document.SUSE information
| National Vulnerability Database | SUSE | |
|---|---|---|
| Base Score | 4.30 | 1.53 |
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P | AV:L/AC:M/Au:S/C:N/I:N/A:P |
| Access Vector | Network | Local |
| Access Complexity | Medium | Medium |
| Authentication | None | Single |
| Confidentiality Impact | None | None |
| Integrity Impact | None | None |
| Availability Impact | Partial | Partial |
| National Vulnerability Database | |
|---|---|
| Base Score | 5.5 |
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| Access Vector | Local |
| Access Complexity | Low |
| Privileges Required | None |
| User Interaction | Required |
| Scope | Unchanged |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | High |
This issue is currently rated as having low severity.
SUSE Bugzilla entries: 1030263 [RESOLVED / ], 1036453 [RESOLVED / ] SUSE Security Advisories:- SUSE-SU-2017:1138-1, published Sat, 29 Apr 2017 00:08:58 +0200 (CEST)
- SUSE-SU-2017:1404-1, published Wed, 24 May 2017 21:13:32 +0200 (CEST)
- openSUSE-SU-2017:1203-1, published Mon, 8 May 2017 18:15:39 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Linux Enterprise Build System Kit 12 SP1 |
| Patchnames: SUSE-SLE-BSK-12-SP1-2017-659 SUSE-SLE-BSK-12-SP1-2017-866 |
| SUSE Linux Enterprise Build System Kit 12 SP2 |
| Patchnames: SUSE-SLE-BSK-12-SP2-2017-659 SUSE-SLE-BSK-12-SP2-2017-866 |
| SUSE Linux Enterprise Desktop 12 SP1 |
| Patchnames: SUSE-SLE-DESKTOP-12-SP1-2017-659 SUSE-SLE-DESKTOP-12-SP1-2017-866 |
| SUSE Linux Enterprise Desktop 12 SP2 |
| Patchnames: SUSE-SLE-DESKTOP-12-SP2-2017-659 SUSE-SLE-DESKTOP-12-SP2-2017-866 |
| SUSE Linux Enterprise Server 12 SP1 |
| Patchnames: SUSE-SLE-SERVER-12-SP1-2017-659 SUSE-SLE-SERVER-12-SP1-2017-866 |
| SUSE Linux Enterprise Server 12 SP2 |
| Patchnames: SUSE-SLE-SERVER-12-SP2-2017-659 SUSE-SLE-SERVER-12-SP2-2017-866 |
| SUSE Linux Enterprise Server 12-LTSS |
| Patchnames: SUSE-SLE-SERVER-12-2017-866 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 |
| Patchnames: SUSE-SLE-RPI-12-SP2-2017-659 SUSE-SLE-RPI-12-SP2-2017-866 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 |
| Patchnames: SUSE-SLE-SDK-12-SP1-2017-659 SUSE-SLE-SDK-12-SP1-2017-866 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 |
| Patchnames: SUSE-SLE-SDK-12-SP2-2017-659 SUSE-SLE-SDK-12-SP2-2017-866 |
| SUSE Linux Enterprise for SAP 12 |
| Patchnames: SUSE-SLE-SAP-12-2017-866 |
| openSUSE Leap 42.1 |
| Patchnames: openSUSE-2017-558 |
| openSUSE Leap 42.2 |
| Patchnames: openSUSE-2017-558 |
List of planned updates
The following information is the current evaluation information for this security issue. It might neither be accurate nor complete, Use at own risk.| Product(s) | Source package |
|---|---|
| ghostscript-library |
