Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-7978

Опубликовано: 23 мая 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.

РелизСтатусПримечание
devel

released

9.19~dfsg+1-0ubuntu7.1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [9.10~dfsg-0ubuntu10.5]]
esm-infra/xenial

released

9.18~dfsg~0-0ubuntu2.2
precise

released

9.05~dfsg-0ubuntu4.4
trusty

released

9.10~dfsg-0ubuntu10.5
trusty/esm

DNE

trusty was released [9.10~dfsg-0ubuntu10.5]
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

released

9.18~dfsg~0-0ubuntu2.2

Показывать по

EPSS

Процентиль: 86%
0.02959
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 5.8
redhat
около 9 лет назад

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.

CVSS3: 9.8
nvd
больше 8 лет назад

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.

CVSS3: 9.8
debian
больше 8 лет назад

Use-after-free vulnerability in Ghostscript 9.20 might allow remote at ...

CVSS3: 9.8
github
больше 3 лет назад

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.

suse-cvrf
около 9 лет назад

Security update for ghostscript-library

EPSS

Процентиль: 86%
0.02959
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3