Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-10219

Fixed in a distro release EPSS 2%

The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.

Published 2017-04-03 · CVE record · OSV

Products: artifex ghostscript

Distro releases

ReleasePackageFixed in
Debian 12ghostscript9.20~dfsg-3.1
Debian 13ghostscript9.20~dfsg-3.1
Debian 14ghostscript9.20~dfsg-3.1
Debian 7ghostscript9.05~dfsg-6.3+deb7u5
Debian 8ghostscript9.06~dfsg-2+deb8u5
SUSE Linux Enterprise Desktop 12 SP2ghostscript9.15-23.7.1
SUSE Linux Enterprise Desktop 12 SP3ghostscript9.15-23.7.1
SUSE Linux Enterprise Server 11 SP4ghostscript-library8.62-32.47.7.1
SUSE Linux Enterprise Server 12 SP2ghostscript9.15-23.7.1
SUSE Linux Enterprise Server 12 SP3ghostscript9.15-23.7.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2ghostscript9.15-23.7.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4ghostscript-library8.62-32.47.7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2ghostscript9.15-23.7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3ghostscript9.15-23.7.1
SUSE Linux Enterprise Software Development Kit 11 SP4ghostscript-library8.62-32.47.7.1
SUSE Linux Enterprise Software Development Kit 12 SP2ghostscript9.15-23.7.1
SUSE Linux Enterprise Software Development Kit 12 SP3ghostscript9.15-23.7.1
Ubuntu 14.04 LTSghostscript9.10~dfsg-0ubuntu10.7
Ubuntu 16.04 LTSghostscript9.18~dfsg~0-0ubuntu2.4
openSUSE Tumbleweedghostscript9.54.0-2.2