NULL pointer dereference in Ghostscript - CVE-2017-7207

Vulnerability identifier: #VU6709

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-7207

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the mem_get_bits_rectangle() function in base/gdevmem.c in Ghostscript. A remote attacker can create a specially crafted PostScript file, pass it to the affected application and crash it.

Ghostscript
Debian Linux
Red Hat Enterprise Linux Server
SUSE Linux
Fedora
ghostscript (Alpine package)
ghostscript

Update to version 9.21.

ghostscript (Alpine package) - update to 9.21-r0
ghostscript - addressed in versions 9.20-7.fc24, 9.20-7.fc25, 9.20-8.fc26

• https://patchwork.openembedded.org/patch/139337/

• SUSE Linux update for ghostscript
• Multiple vulnerabilities in Ghostscript
• Red Hat update for ghostscript
• SUSE Linux update for ghostscript
• OpenSUSE Linux update for ghostscript
• Debian update for ghostscript
• NULL pointer dereference in ghostscript (Alpine package)
• Fedora 26 update for ghostscript
• Fedora 25 update for ghostscript
• Fedora 24 update for ghostscript