CVE-2017-15652Sensitive Information Exposure in Ghostscript

Severity
5.5MEDIUMNVD
EPSS
0.3%
top 49.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 23
Latest updateMay 24

Description

Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a postscript file though ghostscript. Because of imagemagick also use libga, so it was affected as well.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

Debianartifex/ghostscript< 9.25~dfsg-1+3

Patches

🔴Vulnerability Details

3
GHSA
GHSA-x735-fr7j-4w5v: Artifex Ghostscript 92022-05-24
CVEList
CVE-2017-15652: Artifex Ghostscript 92019-05-23
OSV
CVE-2017-15652: Artifex Ghostscript 92019-05-23

📋Vendor Advisories

1
Debian
CVE-2017-15652: ghostscript - Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obta...2017
CVE-2017-15652 — Sensitive Information Exposure | cvebase