CVE-2017-15652

描述

Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a postscript file though ghostscript. Because of imagemagick also use libga, so it was affected as well.

如何修補 CVE-2017-15652

要修補 CVE-2017-15652,請將受影響套件升級到下列已修補版本。

• —升級至 9.25~dfsg-1 或更新版本

CVE-2017-15652 正在被利用嗎?

低 — EPSS 為 1.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 9.25~dfsg-1

CVSS 分數

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2017-15652