CVE-2020-16304
Fixed in a distro release EPSS 2%
A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51.
Products: artifex ghostscript, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | ghostscript | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-doc | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-tools-dvipdf | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-tools-fonts | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-tools-printing | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-x11 | 9.27-1.el8 |
| AlmaLinux 8 | libgs | 9.27-1.el8 |
| AlmaLinux 8 | libgs-devel | 9.27-1.el8 |
| Alpine 3.13 | ghostscript | 9.51-r0 |
| Alpine 3.14 | ghostscript | 9.51-r0 |
| Alpine 3.15 | ghostscript | 9.51-r0 |
| Alpine 3.16 | ghostscript | 9.51-r0 |
| Alpine 3.17 | ghostscript | 9.51-r0 |
| Alpine 3.18 | ghostscript | 9.51-r0 |
| Alpine 3.19 | ghostscript | 9.51-r0 |
| Alpine 3.20 | ghostscript | 9.51-r0 |
| Alpine 3.21 | ghostscript | 9.51-r0 |
| Alpine 3.22 | ghostscript | 9.51-r0 |
| Alpine 3.23 | ghostscript | 9.51-r0 |
| Debian 10 | ghostscript | 9.27~dfsg-2+deb10u4 |
| Debian 12 | ghostscript | 9.51~dfsg-1 |
| Debian 13 | ghostscript | 9.51~dfsg-1 |
| Debian 14 | ghostscript | 9.51~dfsg-1 |
| Debian 9 | ghostscript | 9.26a~dfsg-0+deb9u7 |
| Red Hat Enterprise Linux 8 | ghostscript | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-debuginfo | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-debugsource | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-doc | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-gtk-debuginfo | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-tools-dvipdf | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-tools-fonts | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-tools-printing | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-x11 | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-x11-debuginfo | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | libgs | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | libgs-debuginfo | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | libgs-devel | 0:9.27-1.el8 |
| Rocky Linux 8 | ghostscript | 0:9.27-1.el8 |
| Rocky Linux 8 | ghostscript | 0:9.27-11.el8 |
| Ubuntu 16.04 LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.13 |
| Ubuntu 18.04 LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.13 |
| Ubuntu 20.04 LTS | ghostscript | 9.50~dfsg-5ubuntu4.2 |