CVE-2016-10317

The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
artifexghostscript
9.20
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ghostscript
bullseye
9.53.3~dfsg-7+deb11u7
fixed
wheezy
no-dsa
bullseye (security)
9.53.3~dfsg-7+deb11u8
fixed
bookworm
10.0.0~dfsg-11+deb12u4
fixed
bookworm (security)
10.0.0~dfsg-11+deb12u5
fixed
sid
10.04.0~dfsg-1
fixed
trixie
10.04.0~dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ghostscript
bionic
Fixed 9.22~dfsg+1-0ubuntu1.1
released
artful
Fixed 9.21~dfsg+1-0ubuntu3.1
released
zesty
ignored
yakkety
ignored
xenial
Fixed 9.18~dfsg~0-0ubuntu2.8
released
trusty
Fixed 9.10~dfsg-0ubuntu10.12
released
precise
ignored
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/97410
https://bugs.ghostscript.com/show_bug.cgi?id=697459
https://usn.ubuntu.com/3636-1/
http://www.securityfocus.com/bid/97410
https://bugs.ghostscript.com/show_bug.cgi?id=697459
https://usn.ubuntu.com/3636-1/