Bug 1476192 (CVE-2017-11714)

Summary:	CVE-2017-11714 ghostscript: Out of bounds read in igc_reloc_struct_ptr()
Product:	[Other] Security Response	Reporter:	Adam Mariš <amaris>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	abhgupta, deekej, kseifried, tiwillia, twaugh, zdohnal
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-08-01 08:57:15 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1476193
Bug Blocks:	1476194

Description Adam Mariš 2017-07-28 08:47:58 UTC

psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the
scanner state structure, which allows remote attackers to cause a
denial of service (application crash) or possibly have unspecified
other impact via a crafted PostScript document, related to an
out-of-bounds read in the igc_reloc_struct_ptr function in psi/igc.c.

Upstream bug:

https://bugs.ghostscript.com/show_bug.cgi?id=698158

Upstream patch:

http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=671fd59eb

Comment 1 Adam Mariš 2017-07-28 08:48:26 UTC

Created ghostscript tracking bugs for this issue:

Affects: fedora-all [bug 1476193]

Comment 3 Raphael Sanchez Prudencio 2017-08-01 08:57:24 UTC

Statement:

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.