NULL pointer dereference in ghostscript (Alpine package)

1) NULL pointer dereference

EUVDB-ID: #VU6709

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2017-7207

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the mem_get_bits_rectangle() function in base/gdevmem.c in Ghostscript. A remote attacker can create a specially crafted PostScript file, pass it to the affected application and crash it.

Mitigation

Install update from vendor's website.

Vulnerable software versions

ghostscript (Alpine package): 9.16-r2 - 9.20-r2

CPE2.3

• cpe:2.3:a:alpine:ghostscript_alpine_package:9.16-r2:*:*:*:*:alpine_linux:*:3.2
• cpe:2.3:a:alpine:ghostscript_alpine_package:9.18-r0:*:*:*:*:alpine_linux:*:3.2
• cpe:2.3:a:alpine:ghostscript_alpine_package:9.18-r1:*:*:*:*:alpine_linux:*:3.2

External links

https://git.alpinelinux.org/aports/commit/?id=38c2fab4c40672459821302e7eec434b602757b8
https://git.alpinelinux.org/aports/commit/?id=4a52a88813303a6f82eed629efa03380141dfb5b
https://git.alpinelinux.org/aports/commit/?id=d76bbde3138831382b99b95241f4699877628b6d
https://git.alpinelinux.org/aports/commit/?id=84d9d1ac4496bf8360a8e717152bb81419d7e989
https://git.alpinelinux.org/aports/commit/?id=ecd52791ab2f99ba3adc08ecae1f67bce5be1f80
https://git.alpinelinux.org/aports/commit/?id=0d31fbd835bf00e76c6af48139c8f30e9ee0d095
https://git.alpinelinux.org/aports/commit/?id=9e5165491f23d8a3319f093ca306f184f770e241
https://git.alpinelinux.org/aports/commit/?id=2f6ffe9d3546ffc27017c9e64547d3540322fb5a

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.