vulnerability

Alpine Linux: CVE-2016-10220: ghostscript Multiple vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:M/Au:N/C:N/I:N/A:P)	2017-04-03	2017-09-20	2022-06-17

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

2017-04-03

Added

2017-09-20

Modified

2022-06-17

Description

The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file that is mishandled in the PDF Transparency module.

Solution

alpine-linux-upgrade-ghostscript

References

ALPINE-7311
ALPINE-7313
CVE-2016-10220
https://attackerkb.com/topics/CVE-2016-10220
DEBIAN-DSA-3838

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today