Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-8602

Fixed in a distro release EPSS 3%

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.

Published 2017-04-14 · CVE record · OSV

Products: artifex ghostscript

Distro releases

ReleasePackageFixed in
Debian 12ghostscript9.19~dfsg-3.1
Debian 13ghostscript9.19~dfsg-3.1
Debian 14ghostscript9.19~dfsg-3.1
Debian 7ghostscript9.05~dfsg-6.3+deb7u3
Debian 8ghostscript9.06~dfsg-2+deb8u3
Red Hat Enterprise Linux 6ghostscript0:8.70-21.el6_8.1
Red Hat Enterprise Linux 6ghostscript-debuginfo0:8.70-21.el6_8.1
Red Hat Enterprise Linux 6ghostscript-devel0:8.70-21.el6_8.1
Red Hat Enterprise Linux 6ghostscript-doc0:8.70-21.el6_8.1
Red Hat Enterprise Linux 6ghostscript-gtk0:8.70-21.el6_8.1
Red Hat Enterprise Linux 7ghostscript0:9.07-20.el7_3.1
Red Hat Enterprise Linux 7ghostscript-cups0:9.07-20.el7_3.1
Red Hat Enterprise Linux 7ghostscript-debuginfo0:9.07-20.el7_3.1
Red Hat Enterprise Linux 7ghostscript-devel0:9.07-20.el7_3.1
Red Hat Enterprise Linux 7ghostscript-doc0:9.07-20.el7_3.1
Red Hat Enterprise Linux 7ghostscript-gtk0:9.07-20.el7_3.1
SUSE Linux Enterprise Desktop 12 SP1ghostscript9.15-14.1
SUSE Linux Enterprise Server 11 SP4ghostscript-library8.62-32.41.1
SUSE Linux Enterprise Server 12 SP1ghostscript9.15-14.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4ghostscript-library8.62-32.41.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1ghostscript9.15-14.1
SUSE Linux Enterprise Software Development Kit 11 SP4ghostscript-library8.62-32.41.1
SUSE Linux Enterprise Software Development Kit 12 SP1ghostscript9.15-14.1
Ubuntu 14.04 LTSghostscript9.10~dfsg-0ubuntu10.5
Ubuntu 16.04 LTSghostscript9.18~dfsg~0-0ubuntu2.2
openSUSE Tumbleweedghostscript9.20-2.1