7.8Yüksek KEV

CVE-2017-8291Artifex Ghostscript Type Confusion Vulnerability

artifex ghostscript; debian debian linux; redhat enterprise linux desktop; redhat enterprise linux eus Yayım: 2017-04-27 04:41 (9 yıl önce)

Aktif olarak istismar ediliyor — Artifex Ghostscript Type Confusion Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 24.05.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 14.06.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2017-8291

Açıklama

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.

Zayıflık türü (CWE): CWE-843

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
artifex	ghostscript	< 9.21
debian	debian linux	8.0
redhat	enterprise linux desktop	6.0
redhat	enterprise linux eus	7.3
redhat	enterprise linux server	6.0
redhat	enterprise linux server aus	7.3
redhat	enterprise linux server tus	7.3
redhat	enterprise linux workstation	6.0

Kaynaklar ve yamalar

DSA-3838 vendor-advisoryMailing ListThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1036453 ExploitIssue TrackingThird Party AdvisoryVDB Entry
RHSA-2017:1230 vendor-advisoryThird Party Advisory
98476 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
41955 exploitExploitThird Party AdvisoryVDB Entry
http://openwall.com/lists/oss-security/2017/04/28/2 Mailing ListPatchThird Party Advisory
GLSA-201708-06 vendor-advisoryThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1446063 Issue TrackingPatchThird Party AdvisoryVDB Entry
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=04b37bbce174eed24edec7ad5b920eb93db4d47d Broken Link
https://bugs.ghostscript.com/show_bug.cgi?id=697808 Issue TrackingThird Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8291 US Government Resource

CPE eşleşmeleri (NVD) (20)

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* < 9.21
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

CVSS puanı

7.8Yüksek

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekir
Kapsam: Değişmez
Gizlilik: Yüksek
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tüm puanlar (4)

CISA-ADP	CVSS 3.1	7.8Yüksek
nvd	CVSS 3.1	7.8Yüksek
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.8Yüksek
nvd	CVSS 2.0	6.8Orta

EPSS (30 günde istismar olasılığı)

96.97%

tüm CVE'lerin %100'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: no
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2017-04-26
Yayımlandı2017-04-27 04:41
IP-DB'ye ulaştı2026-10-24 23:32
KEV'e eklendi2022-05-24
Son güncelleme2026-06-17 04:26

Numarayı veren (CNA): mitre
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Debian

9.2Kritik

CVE-2026-111497 KEV 14 gün önce

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Desigo CC family V8; Siemens Desigo CC family V9; Siemens Heliox Dual Port 60kW

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS

8.4Yüksek

CVE-2026-77118 2 ay önce

Out-of-bounds write in GraphicsMagick PCD decoder

GraphicsMagick Group GraphicsMagick; Debian graphicsmagick; Fedora Project GraphicsMagick

A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated…

6.0Orta

CVE-2026-12996 3 ay önce

OpenVPN OpenVPN

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry

5.6Orta

CVE-2026-14355 4 ay önce

ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD

php php

In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation …

3.7Düşük

CVE-2026-56968 4 ay önce

GNU GNU SASL

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

7.5Yüksek

CVE-2026-49975 5 ay önce

Apache HTTP Server: mod_http2 denial of service

Apache Software Foundation Apache HTTP Server; Red Hat JBoss Core Services for RHEL 8; Red Hat JBoss Core Services on RHEL 7; Red Hat Red Hat Enterprise Linux 10

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

33%EPSS