CVE-2020-16291: Buffer Overflow
A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Other sources
A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 9.53.3~dfsg-7+deb11u7Fixed in 9.53.3~dfsg-7+deb11u10Fixed in 10.0.0~dfsg-11+deb12u6Fixed in 10.0.0~dfsg-11+deb12u7Fixed in 10.05.0~dfsg-1 - Upgrade
Upgrade
redhat/ghostscriptto a version that resolves this vulnerability.Fixed in 9.51 - Upgrade
Upgrade
Artifex Software GhostScriptto a version that resolves this vulnerability.Fixed in v9.51 - Compensating control
Mitigate exposure by not processing untrusted/crafted PDF files with GhostScript until the fixed version (v9.51) is deployed.
Event History
Frequently Asked Questions
What is the vulnerability ID for this buffer overflow vulnerability?
The vulnerability ID for this buffer overflow vulnerability is CVE-2020-16291.
What is the severity rating of CVE-2020-16291?
CVE-2020-16291 has a severity rating of 5.5 (medium).
How does CVE-2020-16291 affect Artifex Software GhostScript?
CVE-2020-16291 allows a remote attacker to cause a denial of service in Artifex Software GhostScript v9.50 via a crafted PDF file.
Which versions of Artifex Software GhostScript are affected by CVE-2020-16291?
Artifex Software GhostScript v9.50 is affected by CVE-2020-16291.
How can I fix CVE-2020-16291?
To fix CVE-2020-16291, update to Artifex Software GhostScript v9.51.