CVE-2017-8291

Aliases:DEBIAN-CVE-2017-8291RHSA-2017:1230
Advisory lineage Upstream: 0 Downstream: 13
Analyzed
Published: 27 Apr 2017, 01:41
Last modified:21 Oct 2025, 23:55

Vulnerability Summary

Overall Risk (default)
high
61/100
CVSS Score
7.8 HIGH
v3.1 (cve.org)
EPSS Score
96.97% CRITICAL
97% probability +4.11%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
3 found
Dark Web
Not detected

Timeline

27 Apr 2017, 01:41
Published
Vulnerability first disclosed
24 May 2022, 00:00
Added to CISA KEV
Artifex Ghostscript Type Confusion Vulnerability
14 Jun 2022, 00:00
CISA Remediation Due
Apply updates per vendor instructions.
21 Oct 2025, 23:55
Last Modified
Vulnerability information updated

Description

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • v3.0•HIGH•Score: 7.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 96.97%• Percentile: 100%

Techniques & Countermeasures

  • CWE-843•Access of Resource Using Incompatible Type ('Type Confusion')

    The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Affected Systems

  • artifex•ghostscript

    < 9.21

  • debian•ghostscript

    < 9.20~dfsg-3.1 | < 9.20~dfsg-3.1 | < 9.20~dfsg-3.1 | < 9.20~dfsg-3.1

  • debian•debian_linux

    8.0

  • redhat•enterprise_linux_desktop

    6.0 | 7.0

  • redhat•enterprise_linux_eus

    7.3 | 7.4 | 7.5 | 7.6 | 7.7

  • redhat•enterprise_linux_server

    6.0 | 7.0

  • redhat•enterprise_linux_server_aus

    7.3 | 7.4 | 7.6 | 7.7

  • redhat•enterprise_linux_server_tus

    7.3 | 7.6 | 7.7

  • redhat•enterprise_linux_workstation

    6.0 | 7.0

  • redhat•ghostscript

    < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5

  • redhat•ghostscript-cups

    < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5

  • redhat•ghostscript-debuginfo

    < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5

  • redhat•ghostscript-devel

    < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5

  • redhat•ghostscript-doc

    < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5

  • redhat•ghostscript-gtk

    < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:8.70-23.el6_9.2 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5 | < 0:9.07-20.el7_3.5

References (18)