| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | ≤ 9.20 |
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free