CVE-2017-11714 Ubuntu Security Notification for Ghostscript Vulnerabilities (USN-3403-1)

2017年9月7日 1361点热度 0人点赞 0条评论

漏洞类别：Ubuntu

漏洞等级：

漏洞信息

It was discovered that Ghostscript mishandles references.

It was discovered that Ghostscript could allow a heap-based buffer over-read and application crash.

An use-after-free vulnerability in Ghostscript.

A lack of integer overflow check in Ghostscript.

漏洞危害

A remote attacker could use this to cause a denial of service. (CVE-2017-11714)

A remote attacker could use a crafted document to cause a denial of service. (CVE-2017-9611, CVE-2017-9726, CVE-2017-9727, CVE-2017-9739)

A remote attacker could use a crafted file to cause a denial of service. (CVE-2017-9612)

A remote attacker could use crafted PostScript document to cause a denial of service. (CVE-2017-9835)

解决方案

Refer to Ubuntu advisory USN-3403-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

0daybank