CVE-2020-16294: Buffer Overflow
First published: Thu Aug 13 2020(Updated: )
A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Artifex Ghostscript | <9.52 | |
| Debian Debian Linux | =9.0 | |
| Debian Debian Linux | =10.0 | |
| Canonical Ubuntu Linux | =16.04 | |
| Canonical Ubuntu Linux | =18.04 | |
| Canonical Ubuntu Linux | =20.04 | |
| redhat/ghostscript | <9.51 | 9.51 |
| debian/ghostscript | 9.53.3~dfsg-7+deb11u7 10.0.0~dfsg-11+deb12u4 10.0.0~dfsg-11+deb12u5 10.04.0~dfsg-1 |
Remedy
https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=89f58f1aa95b3482cadf6977da49457194ee5358
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugs.ghostscript.com/show_bug.cgi?id=701794
- https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=89f58f1aa95b3482cadf6977da49457194ee5358
- https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
- https://security.gentoo.org/glsa/202008-20
- https://usn.ubuntu.com/4469-1/
- https://www.debian.org/security/2020/dsa-4748
- https://launchpad.net/bugs/cve/CVE-2020-16294
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=89f58f1aa95b3482cadf6977da49457194ee5358
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1870232
- https://access.redhat.com/errata/RHSA-2021:1852
- https://access.redhat.com/security/cve/cve-2020-16294
- https://bugzilla.redhat.com/show_bug.cgi?id=1870229
- https://security-tracker.debian.org/tracker/CVE-2020-16294
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16294
- https://nvd.nist.gov/vuln/detail/CVE-2020-16294
- https://ubuntu.com/security/CVE-2020-16294
Frequently Asked Questions
What is the vulnerability ID for this buffer overflow vulnerability?
The vulnerability ID for this buffer overflow vulnerability is CVE-2020-16294.
What is the affected software for this vulnerability?
The affected software for this vulnerability is Artifex Software GhostScript version 9.50.
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium (CVSS score 5.5).
How can a remote attacker exploit this vulnerability?
A remote attacker can exploit this vulnerability by sending a crafted PDF file to the target system, causing a buffer overflow in the epsc_print_page() function.
How can I fix this vulnerability?
To fix this vulnerability, update Artifex Software GhostScript to version 9.51 or later.
- collector/nvd-index
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/author
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/remedy
- agent/weakness
- agent/severity
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-16294
- agent/last-modified-date
- agent/trending
- vendor/artifex
- canonical/artifex ghostscript
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0
- version/debian debian linux/10.0
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/16.04
- version/canonical ubuntu linux/18.04
- version/canonical ubuntu linux/20.04
- package-manager/debian
- package-manager/redhat