CVE-2017-9612 — ghostscript: Use-after-free in the Ins_IP function

Back Back to CVE browser

HIGH

ghostscript: Use-after-free in the Ins_IP function

Published Jul 26, 2017

7.8

HIGH

CVSS 3.0

EPSS 2.46%

Description

The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document.

Affected products

Red Hat Enterprise Linux 5

ghostscript

Will not fix
Red Hat Enterprise Linux 6

ghostscript

Will not fix
Red Hat Enterprise Linux 7

ghostscript

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	ghostscript	Will not fix	n/a
Red Hat Enterprise Linux 6	ghostscript	Will not fix	n/a
Red Hat Enterprise Linux 7	ghostscript	Will not fix	n/a

Remediation

No remediation recorded yet.

Metrics

2.46% 0.02458

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02458

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Table of values (20 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.46% (0.02458)	83.86th	v5 (v2026.06.15)
Sep 22, 2026	2.46% (0.02458)	83.72th	v5 (v2026.06.15)
Sep 21, 2026	4.16% (0.04160)	90.45th	v5 (v2026.06.15)
Sep 6, 2026	2.46% (0.02458)	83.37th	v5 (v2026.06.15)
Sep 5, 2026	4.16% (0.04160)	90.24th	v5 (v2026.06.15)
Aug 30, 2026	2.46% (0.02458)	83.28th	v5 (v2026.06.15)
Aug 28, 2026	4.16% (0.04160)	90.18th	v5 (v2026.06.15)
Aug 24, 2026	2.46% (0.02458)	83.19th	v5 (v2026.06.15)
Aug 23, 2026	4.16% (0.04160)	90.14th	v5 (v2026.06.15)
Jun 15, 2026	2.46% (0.02458)	82.28th	v5 (v2026.06.15)
Apr 13, 2026	1.29% (0.01290)	79.66th	v4 (v2025.03.14)
Mar 17, 2025	0.17% (0.00170)	35.71th	v4 (v2025.03.14)
Dec 12, 2024	0.70% (0.00698)	80.92th	v3 (v2023.03.01)
Apr 12, 2024	0.70% (0.00698)	79.97th	v3 (v2023.03.01)
Dec 11, 2023	0.70% (0.00698)	77.97th	v3 (v2023.03.01)
Mar 7, 2023	0.49% (0.00492)	72.46th	v3 (v2023.03.01)
Mar 6, 2023	1.21% (0.01213)	66.61th	v2 (v2022.01.01)
Feb 4, 2022	1.21% (0.01213)	40.54th	v2 (v2022.01.01)
Feb 3, 2022	1.94% (0.01943)	48.45th	v5 (v2026.06.15)
Apr 14, 2021	1.94% (0.01943)	0.00th	v1

Weaknesses (1)

CWE-416

Use After Free

References (9)

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=98f6da60b9d463c617e631fc254cf6d66f2e8e3c
x_refsource_CONFIRM
http://www.debian.org/security/2017/dsa-3986
vendor-advisoryx_refsource_DEBIANThird Party Advisory
http://www.securityfocus.com/bid/99979
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2017-9612
Vendor Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=698026
x_refsource_CONFIRMExploitIssue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1475826
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2017-9612
https://security.gentoo.org/glsa/201811-12
vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2017-9612

Link	Providers	Tags
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=98f6da60b9d463c617e631fc254cf6d66f2e8e3c		x_refsource_CONFIRM
http://www.debian.org/security/2017/dsa-3986		vendor-advisoryx_refsource_DEBIANThird Party Advisory
http://www.securityfocus.com/bid/99979		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2017-9612		Vendor Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=698026		x_refsource_CONFIRMExploitIssue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1475826		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2017-9612
https://security.gentoo.org/glsa/201811-12		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2017-9612