CVE-2017-7975
published 2017-04-19CVE-2017-7975: Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in…
PriorityP432high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
1.67%
74.0th percentile
Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | jbig2dec | — | — |
| artifex | jbig2dec | >= 0 < 0.13-4.1 | 0.13-4.1 |
| artifex | jbig2dec | >= 0 < 0.13-4.1 | 0.13-4.1 |
| artifex | jbig2dec | >= 0 < 0.13-4.1 | 0.13-4.1 |
| artifex | jbig2dec | >= 0 < 0.13-4.1 | 0.13-4.1 |
| artifex | jbig2dec | >= 0 < 0.11+20120125-1ubuntu1.1 | 0.11+20120125-1ubuntu1.1 |
| artifex | jbig2dec | >= 0 < 0.12+20150918-1ubuntu0.1 | 0.12+20150918-1ubuntu0.1 |
| debian | jbig2dec | < jbig2dec 0.13-4.1 (bookworm) | jbig2dec 0.13-4.1 (bookworm) |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8rh8-m25j-rhmp: Artifex jbig2dec 0
ghsa_unreviewed·2022-05-17
CVE-2017-7975 [HIGH] CWE-190 GHSA-8rh8-m25j-rhmp: Artifex jbig2dec 0
Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code.
OSV
jbig2dec vulnerabilities
osv·2017-05-24·CVSS 5.5
CVE-2016-9601 [MEDIUM] jbig2dec vulnerabilities
jbig2dec vulnerabilities
Bingchang Liu discovered that jbig2dec incorrectly handled memory when
decoding malformed image files. If a user or automated system were tricked
into processing a specially crafted JBIG2 image file, a remote attacker
could cause jbig2dec to crash, resulting in a denial of service, or
possibly execute arbitrary code. This issue only applied to Ubuntu 14.04
LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-9601)
It was discovered that jbig2dec incorrectly handled memory when decoding
malformed image files. If a user or automated system were tricked into
processing a specially crafted JBIG2 image file, a remote attacker could
cause jbig2dec to crash, resulting in a denial of service, or possibly
disclose sensitive information. (CVE-2017-7885)
Jiaqi Peng discovered
OSV
CVE-2017-7975: Artifex jbig2dec 0
osv·2017-04-19·CVSS 7.8
CVE-2017-7975 [HIGH] CVE-2017-7975: Artifex jbig2dec 0
Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code.
Ubuntu
jbig2dec vulnerabilities
vendor_ubuntu·2017-05-24·CVSS 5.3
CVE-2016-9601 [MEDIUM] jbig2dec vulnerabilities
Title: jbig2dec vulnerabilities
Summary: Several security issues were fixed in jbig2dec.
Bingchang Liu discovered that jbig2dec incorrectly handled memory when
decoding malformed image files. If a user or automated system were tricked
into processing a specially crafted JBIG2 image file, a remote attacker
could cause jbig2dec to crash, resulting in a denial of service, or
possibly execute arbitrary code. This issue only applied to Ubuntu 14.04
LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-9601)
It was discovered that jbig2dec incorrectly handled memory when decoding
malformed image files. If a user or automated system were tricked into
processing a specially crafted JBIG2 image file, a remote attacker could
cause jbig2dec to crash, resulting in a denial of service, or possibly
discl
Red Hat
jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write
vendor_redhat·2017-03-27·CVSS 7.8
CVE-2017-7975 [HIGH] CWE-190 jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write
jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write
Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code.
Package: ghostscript (Red Hat Enterprise Linux 5) - Not affected
Package: ghostscript (Red Hat Enterprise Linux 6) - Not affected
Package: ghostscript (Red Hat Enterprise Linux 7) - Will not fix
Package: ghostscript (Red Hat OpenShift Enterprise 2) - Under investigation
Debian
CVE-2017-7975: jbig2dec - Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes becau...
vendor_debian·2017·CVSS 7.8
CVE-2017-7975 [HIGH] CVE-2017-7975: jbig2dec - Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes becau...
Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code.
Scope: local
bookworm: resolved (fixed in 0.13-4.1)
bullseye: resolved (fixed in 0.13-4.1)
forky: resolved (fixed in 0.13-4.1)
sid: resolved (fixed in 0.13-4.1)
trixie: resolved (fixed in 0.13-4.1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 mupdf: various flaws [fedora-all]
bugzilla·2017-04-20·CVSS 7.1
CVE-2017-7885 [HIGH] CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 mupdf: various flaws [fedora-all]
CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 mupdf: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions o
Bugzilla
CVE-2017-7975 jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write
bugzilla·2017-04-20·CVSS 7.8
CVE-2017-7975 [HIGH] CVE-2017-7975 jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write
CVE-2017-7975 jbig2dec: Integer overflow in jbig2_build_huffman_table allows OOB write
Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in jbig2_huffman.c during operations on a crafted JBIG2 file, leading to a denial of service (application crash) or possibly execution of arbitrary code.
Upstream bug:
https://bugs.ghostscript.com/show_bug.cgi?id=697693
Discussion:
Acknowledgments:
Name: Jiaqi Peng (Chinese Academy of Sciences)
---
Created jbig2dec tracking bugs for this issue:
Affects: epel-all [bug 1443899]
---
Note: in 64 bits environment, OOB write concerns only the 0xffffffffxxxxxxxx range. This range is at best read-only, thus would not lead to a possible arbitrary code execu
Bugzilla
CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 ghostscript: various flaws [fedora-all]
bugzilla·2017-04-20·CVSS 7.1
CVE-2017-7885 [HIGH] CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 ghostscript: various flaws [fedora-all]
CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 ghostscript: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported vers
Bugzilla
CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 jbig2dec: various flaws [epel-all]
bugzilla·2017-04-20·CVSS 7.1
CVE-2017-7885 [HIGH] CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 jbig2dec: various flaws [epel-all]
CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 jbig2dec: various flaws [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of
Bugzilla
CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 jbig2dec: various flaws [fedora-all]
bugzilla·2017-04-20·CVSS 7.1
CVE-2017-7885 [HIGH] CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 jbig2dec: various flaws [fedora-all]
CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 jbig2dec: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported version
2017-04-19
Published