CVE-2020-16296: Buffer Overflow
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Other sources
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/ghostscriptto a version that resolves this vulnerability.Fixed in 0:9.27-1.el8 - Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 9.53.3~dfsg-7+deb11u7Fixed in 9.53.3~dfsg-7+deb11u10Fixed in 10.0.0~dfsg-11+deb12u6Fixed in 10.0.0~dfsg-11+deb12u7Fixed in 10.05.0~dfsg-1 - Upgrade
Upgrade
redhat/ghostscriptto a version that resolves this vulnerability.Fixed in 9.51 - Upgrade
Upgrade
Artifex Software GhostScriptto a version that resolves this vulnerability.Fixed in v9.51
Event History
Frequently Asked Questions
What is CVE-2020-16296?
CVE-2020-16296 is a buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript v9.50.
How does CVE-2020-16296 impact me?
CVE-2020-16296 allows a remote attacker to cause a denial of service via a crafted PDF file.
What is the severity of CVE-2020-16296?
CVE-2020-16296 has a severity rating of 5.5 (medium).
How do I fix CVE-2020-16296?
To fix CVE-2020-16296, you need to update to Artifex Software GhostScript v9.51.
Where can I find more information about CVE-2020-16296?
You can find more information about CVE-2020-16296 at the following references: [link1], [link2], [link3].