The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1218:01 advisory.

    Ghostscript is a set of software that provides a PostScript     interpreter, a set of C procedures (the Ghostscript library, which     implements the graphics capabilities in the PostScript language) and     an interpreter for Portable Document Format (PDF) files. Ghostscript     translates PostScript code into many common, bitmapped formats, like     those understood by your printer or screen. Ghostscript is normally     used to display PostScript files and to print PostScript files to     non-PostScript printers.
    If you need to display PostScript files or print them to     non-PostScript printers, you should install ghostscript. If you     install ghostscript, you also need to install the ghostscript-fonts     package.
    Security issues fixed with this release:
    CVE-2013-5653
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-7977
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-7978
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-7979
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-8602
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for ghostscript-library fixes the following issues :

  - Multiple security vulnerabilities have been discovered     where ghostscript's '-dsafer' flag did not provide     sufficient protection against unintended access to the     file system. Thus, a machine that would process a     specially crafted Postscript file would potentially leak     sensitive information to an attacker. (CVE-2013-5653,     bsc#1001951)

  - An incorrect reference count was found in .setdevice.
    This issue lead to a use-after-free scenario, which     could have been exploited for denial-of-service or,     possibly, arbitrary code execution attacks.
    (CVE-2016-7978, bsc#1001951)

  - Insufficient validation of the type of input in     .initialize_dsc_parser used to allow remote code     execution. (CVE-2016-7979, bsc#1001951)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is a rebase of **ghostscript** package, to address several security issues :

  - [CVE-2016-7977     ](https://bugzilla.redhat.com/show_bug.cgi?id=1380415) -
    *.libfile does not honor -dSAFER*

  -     [CVE-2013-5653](https://bugzilla.redhat.com/show_bug.cgi     ?id=1380327) - *getenv and filenameforall ignore
    -dSAFER*

  -     [CVE-2016-7976](https://bugzilla.redhat.com/show_bug.cgi     ?id=1382294) - *various userparams allow %pipe% in     paths, allowing remote shell*

  -     [CVE-2016-7978](https://bugzilla.redhat.com/show_bug.cgi     ?id=1382300) - *reference leak in .setdevice allows     use-after-free and remote code*

  -     [CVE-2016-7979](https://bugzilla.redhat.com/show_bug.cgi     ?id=1382305) - *Type confusion in .initialize_dsc_parser     allows remote code execution*

----------- #### INFORMATION FOR FEDORA PACKAGERS & MAINTAINERS :

**ghostscript** has been rebased to latest upstream version (9.20).
Rebase notes :

  - **no API/ABI changes between versions 9.16 -> 9.20     according to upstream**

  - *OpenJPEG* support has been retained

  - *ijs-config* custom tool from upstream has been
    *removed* (by upstream) (*pkg-config* is used by default     now instead, see [commit     0c176a9](http://git.ghostscript.com/?p=ghostpdl.git;h=0c     176a91d53c85cda))

  - some patches were updated to 'git format-patch' format &     renamed

  - rest of the patches were deleted (irrelevant for current     version), mostly because upstream has fixed those issues     in some way

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - It was found that the ghostscript functions getenv,     filenameforall and .libfile did not honor the -dSAFER     option, usually used when processing untrusted     documents, leading to information disclosure. A     specially crafted postscript document could read     environment variable, list directory and retrieve file     content respectively, from the target. (CVE-2013-5653,     CVE-2016-7977)

  - It was found that the ghostscript function .setdevice     suffered a use- after-free vulnerability due to an     incorrect reference count. A specially crafted     postscript document could trigger code execution in the     context of the gs process. (CVE-2016-7978)

  - It was found that the ghostscript function     .initialize_dsc_parser did not validate its parameter     before using it, allowing a type confusion flaw. A     specially crafted postscript document could cause a     crash code execution in the context of the gs process.
    (CVE-2016-7979)

  - It was found that ghostscript did not sufficiently check     the validity of parameters given to the .sethalftone5     function. A specially crafted postscript document could     cause a crash, or execute arbitrary code in the context     of the gs process. (CVE-2016-8602)

ID	名稱	產品	系列	已發布	已更新	嚴重性
288897	MiracleLinux 7 : ghostscript-9.07-20.el7.1 (AXSA:2017-1218:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
94006	SUSE SLED12 / SLES12 Security Update : ghostscript-library (SUSE-SU-2016:2492-1)	Nessus	SuSE Local Security Checks	2016/10/12	2026/1/22	critical
94119	Fedora 23 : ghostscript (2016-1c13825502)	Nessus	Fedora Local Security Checks	2016/10/19	2026/1/21	critical
94121	Fedora 24 : ghostscript (2016-53e8aa35f6)	Nessus	Fedora Local Security Checks	2016/10/19	2026/1/21	critical
96302	Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20170104)	Nessus	Scientific Linux Local Security Checks	2017/1/5	2026/1/6	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical