CVE-2020-16304: Buffer Overflow
A buffer overflow vulnerability in imagerendercolorthresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51.
Other sources
A buffer overflow vulnerability in imagerendercolorthresh() in base/gxicolor.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 9.53.3~dfsg-7+deb11u7Fixed in 9.53.3~dfsg-7+deb11u11Fixed in 10.0.0~dfsg-11+deb12u8Fixed in 10.05.1~dfsg-1+deb13u1Fixed in 10.07.0~dfsg-2 - Upgrade
Upgrade
redhat/ghostscriptto a version that resolves this vulnerability.Fixed in 9.51 - Upgrade
Upgrade
Artifex Software GhostScriptto a version that resolves this vulnerability.Fixed in v9.51 - Compensating control
Mitigate the issue by preventing remote/untrusted attackers from supplying crafted EPS files to GhostScript (e.g., restrict upload/conversion of EPS to trusted sources only, and limit access to any service that renders EPS).
Event History
Frequently Asked Questions
What is CVE-2020-16304?
CVE-2020-16304 is a buffer overflow vulnerability in Artifex Software GhostScript v9.50.
How severe is CVE-2020-16304?
CVE-2020-16304 has a severity rating of 5.5 (medium).
How does CVE-2020-16304 work?
CVE-2020-16304 allows a remote attacker to escalate privileges by exploiting a buffer overflow in the image_render_color_thresh() function.
Which software versions are affected by CVE-2020-16304?
Versions 9.50 of Artifex Software GhostScript are affected by CVE-2020-16304.
How can I fix CVE-2020-16304?
You can fix CVE-2020-16304 by updating Artifex Software GhostScript to version 9.51.