CVE-2020-16301: Buffer Overflow
A buffer overflow vulnerability in okiibmprintpage1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 9.53.3~dfsg-7+deb11u7Fixed in 9.53.3~dfsg-7+deb11u10Fixed in 10.0.0~dfsg-11+deb12u6Fixed in 10.0.0~dfsg-11+deb12u7Fixed in 10.05.0~dfsg-1 - Upgrade
Upgrade
redhat/ghostscriptto a version that resolves this vulnerability.Fixed in 9.51 - Upgrade
Upgrade
Artifex Software GhostScriptto a version that resolves this vulnerability.Fixed in 9.51
Event History
Frequently Asked Questions
What is the vulnerability ID for this buffer overflow vulnerability?
The vulnerability ID for this buffer overflow vulnerability is CVE-2020-16301.
What software is affected by this vulnerability?
The Artifex Software GhostScript versions 9.50 and earlier are affected by this vulnerability.
What is the severity of CVE-2020-16301?
The severity of CVE-2020-16301 is medium with a CVSS score of 5.5.
How can a remote attacker exploit this vulnerability?
A remote attacker can exploit this vulnerability by providing a crafted PDF file to the affected software.
How can I fix CVE-2020-16301?
To fix CVE-2020-16301, update the Artifex Software GhostScript to version 9.51 or later.