cbcvebase.
CVE-2020-16305
published 2020-08-13

CVE-2020-16305: A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a…

medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.

Affected

21 ranges
VendorProductVersion rangeFixed in
artifexghostscript< 9.519.51
artifexghostscript
artifexghostscript>= 0 < 9.51~dfsg-19.51~dfsg-1
artifexghostscript>= 0 < 9.51~dfsg-19.51~dfsg-1
artifexghostscript>= 0 < 9.51~dfsg-19.51~dfsg-1
artifexghostscript>= 0 < 9.51~dfsg-19.51~dfsg-1
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debianghostscript< ghostscript 9.51~dfsg-1 (bookworm)ghostscript 9.51~dfsg-1 (bookworm)
debianghostscript
redhatcodeready_linux_builder
redhatcodeready_linux_builder_for_arm64
redhatcodeready_linux_builder_for_ibm_z_systems
redhatcodeready_linux_builder_for_power_little_endian
redhatenterprise_linux
redhatenterprise_linux_for_arm_64
redhatenterprise_linux_for_ibm_z_systems
redhatenterprise_linux_for_power_little_endian

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM