CVE-2020-16293: Null Pointer Dereference
A null pointer dereference vulnerability in composegroupnonknockoutnonblendisolatedallmaskcommon() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/ghostscriptto a version that resolves this vulnerability.Fixed in 0:9.27-1.el8 - Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 9.53.3~dfsg-7+deb11u7Fixed in 9.53.3~dfsg-7+deb11u10Fixed in 10.0.0~dfsg-11+deb12u6Fixed in 10.0.0~dfsg-11+deb12u7Fixed in 10.05.0~dfsg-1 - Upgrade
Upgrade
redhat/ghostscriptto a version that resolves this vulnerability.Fixed in 9.51 - Upgrade
Upgrade
Artifex Software GhostScriptto a version that resolves this vulnerability.Fixed in 9.51
Event History
Frequently Asked Questions
What is the vulnerability ID for this null pointer dereference vulnerability?
CVE-2020-16293
What is the severity of CVE-2020-16293?
The severity of CVE-2020-16293 is medium with a severity value of 5.5.
How does CVE-2020-16293 impact Artifex Software GhostScript?
CVE-2020-16293 allows a remote attacker to cause a denial of service in Artifex Software GhostScript v9.50 via a crafted PDF file.
How can I fix the null pointer dereference vulnerability in GhostScript?
To fix the null pointer dereference vulnerability in GhostScript, you should update to version 9.51, which has the fix for this vulnerability.
Where can I find more information about CVE-2020-16293?
You can find more information about CVE-2020-16293 on the following references: [Link1](https://bugs.ghostscript.com/show_bug.cgi?id=701795), [Link2](https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=7870f4951bcc6a153f317e3439e14d0e929fd231), [Link3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1870233).