vulnerability

SUSE: CVE-2017-9216: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
2017-05-24
Added
2018-02-14
Modified
2022-02-04

Description

libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.

Solution(s)

suse-upgrade-ghostscriptsuse-upgrade-ghostscript-develsuse-upgrade-ghostscript-fonts-othersuse-upgrade-ghostscript-fonts-russuse-upgrade-ghostscript-fonts-stdsuse-upgrade-ghostscript-ijs-develsuse-upgrade-ghostscript-librarysuse-upgrade-ghostscript-omnisuse-upgrade-ghostscript-x11suse-upgrade-libgimpprintsuse-upgrade-libgimpprint-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.