CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.

• CWE-704

• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=f5c7555c303
• http://rhn.redhat.com/errata/RHSA-2017-0013.html
• http://rhn.redhat.com/errata/RHSA-2017-0014.html
• http://www.debian.org/security/2016/dsa-3691
• http://www.openwall.com/lists/oss-security/2016/10/11/5Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/10/11/7Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/95311Third Party Advisory, VDB Entry
• https://bugs.ghostscript.com/show_bug.cgi?id=697203Issue Tracking, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=1383940Issue Tracking, Patch
• https://ghostscript.com/doc/9.21/History9.htmPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201702-31
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=f5c7555c303
• http://rhn.redhat.com/errata/RHSA-2017-0013.html
• http://rhn.redhat.com/errata/RHSA-2017-0014.html
• http://www.debian.org/security/2016/dsa-3691
• http://www.openwall.com/lists/oss-security/2016/10/11/5Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/10/11/7Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/95311Third Party Advisory, VDB Entry
• https://bugs.ghostscript.com/show_bug.cgi?id=697203Issue Tracking, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=1383940Issue Tracking, Patch
• https://ghostscript.com/doc/9.21/History9.htmPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201702-31

Published

Apr 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8595The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg …
• CVE-2016-8596Buffer overflow in the csp_can_process_frame in csp_if_can.c…
• CVE-2016-8597Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the l…
• CVE-2016-8598Buffer overflow in the zmq interface in csp_if_zmqhub.c in t…
• CVE-2016-8600In dotCMS 3.2.1, attacker can load captcha once, fill it wit…
• CVE-2016-8601Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8605The mkdir procedure of GNU Guile temporarily changed the pro…
• CVE-2016-8606The REPL server (--listen) in GNU Guile 2.0.12 allows an att…
• CVE-2016-8608JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS …5.4
• CVE-2016-8609It was found that the keycloak before 2.3.0 did not implemen…3.7
• CVE-2016-8610A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, …7.5
• CVE-2016-8611A vulnerability was found in Openstack Glance. No limits are…4.3