Ghostscript CVE-2017-5951 Denial of Service Vulnerability

Bugtraq ID:	98665
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-5951
Remote:	Yes
Local:	No
Published:	Mar 04 2017 12:00AM
Updated:	Aug 21 2017 09:11AM
Credit:	Kamil Frankowicz
Vulnerable:	SuSE Linux Enterprise Software Development Kit 12 SP2 SuSE Linux Enterprise Software Development Kit 12 SP1 SuSE Linux Enterprise Server for SAP 12 SuSE Linux Enterprise Server for Raspberry Pi 12-SP2 SuSE Linux Enterprise Server 12-SP2 SuSE Linux Enterprise Server 12-SP1 SuSE Linux Enterprise Server 12-LTSS SuSE Linux Enterprise Desktop 12-SP2 SuSE Linux Enterprise Desktop 12-SP1 Redhat OpenShift Enterprise 2 Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Redhat Enterprise Linux 5 Ghostscript Ghostscript 9.20 Gentoo Linux
Not Vulnerable:

Ghostscript CVE-2017-5951 Denial of Service Vulnerability

Ghostscript is prone to a denial of service vulnerability.

An attacker can leverage this issue to cause denial of service condition, denying service to legitimate users.

Ghostscript CVE-2017-5951 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ghostscript CVE-2017-5951 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Ghostscript CVE-2017-5951 Denial of Service Vulnerability

References:

• Ghostscript Homepage (Ghostscript)
  
• Bug 697548 - Null pointer dereference in ref_stack_index() (ghostscript)
  
• CVE-2017-5951 (Redhat)