CVE-2016-9601 Memory corruption in ghostscript
A heap-based buffer overflow in Ghostscript's JBIG2 decoder allows attackers to cause a crash or potentially execute code via crafted documents.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-9601?
CVE-2016-9601 is a medium-severity memory corruption vulnerability in Debian Debian Linux, published on 23 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an embedded, specially crafted, jbig2 image could trigger a segmentation fault in ghostscript.
Which versions are affected by CVE-2016-9601?
It affects 3 products.
Products include Artifex Gpl Ghostscript, Artifex Jbig2dec, Debian Debian Linux.
How do I fix CVE-2016-9601?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-9601 being exploited?
There is no known exploitation of CVE-2016-9601 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2016-9601, GHSA-vf87-jj8q-h556, UBUNTU-CVE-2016-9601.