CVE-2020-21890
Fixed in a distro release EPSS <1%
Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document.
Products: artifex ghostscript
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | ghostscript | 9.25-5.amzn2.0.5 |
| Amazon Linux 2 | ghostscript-cups | 9.25-5.amzn2.0.5 |
| Amazon Linux 2 | ghostscript-doc | 9.25-5.amzn2.0.5 |
| Amazon Linux 2 | ghostscript-gtk | 9.25-5.amzn2.0.5 |
| Amazon Linux 2 | libgs | 9.25-5.amzn2.0.5 |
| Amazon Linux 2 | libgs-devel | 9.25-5.amzn2.0.5 |
| Debian 10 | ghostscript | 9.27~dfsg-2+deb10u9 |
| Debian 12 | ghostscript | 9.51~dfsg-1 |
| Debian 13 | ghostscript | 9.51~dfsg-1 |
| Debian 14 | ghostscript | 9.51~dfsg-1 |
| Ubuntu 20.04 LTS | ghostscript | 9.50~dfsg-5ubuntu4.10 |
| Ubuntu Pro 16.04 LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.14+esm7 |
| Ubuntu Pro 18.04 LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.18+esm2 |