Summary
It was discovered that Ghostscript incorrectly handled certain document
files. If a user or automated system were tricked into processing a
specially crafted file, a remote attacker could use this issue to cause
Ghostscript to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.13 |
| Ubuntu · 18.04 LTS 18.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.13 |
| Ubuntu · 20.04 LTS 20.04:LTS | ghostscript | 9.50~dfsg-5ubuntu4.2 |
Vulnerabilities 25
-
Unscored —
A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 al…
-
Unscored —
A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 a…
-
Unscored —
A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a…
-
Unscored —
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 al…
-
Unscored —
A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote att…
-
Unscored —
A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 …
-
Unscored —
A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblen…
-
Unscored —
A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows…
-
Unscored —
A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50…
-
Unscored —
A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v…
-
Unscored —
A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.…
-
Unscored —
A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.…
-
Unscored —
A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9…
-
Unscored —
A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allo…
-
Unscored —
A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 all…
-
Unscored —
A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 al…
-
Unscored —
A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v…
-
Unscored —
A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18…
-
Unscored —
A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 …
-
Unscored —
A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote at…
-
Unscored —
A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript …
-
Unscored —
A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a …
-
Unscored —
A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 all…
-
Unscored —
A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allo…
-
Unscored —
A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9…
References
-
report
https://ubuntu.com/security/CVE-2020-16287
-
report
https://ubuntu.com/security/CVE-2020-16288
-
report
https://ubuntu.com/security/CVE-2020-16289
-
report
https://ubuntu.com/security/CVE-2020-16290
-
report
https://ubuntu.com/security/CVE-2020-16291
-
report
https://ubuntu.com/security/CVE-2020-16292
-
report
https://ubuntu.com/security/CVE-2020-16293
-
report
https://ubuntu.com/security/CVE-2020-16294
-
report
https://ubuntu.com/security/CVE-2020-16295
-
report
https://ubuntu.com/security/CVE-2020-16296
-
report
https://ubuntu.com/security/CVE-2020-16297
-
report
https://ubuntu.com/security/CVE-2020-16298
-
report
https://ubuntu.com/security/CVE-2020-16299
-
report
https://ubuntu.com/security/CVE-2020-16300
-
report
https://ubuntu.com/security/CVE-2020-16301
-
report
https://ubuntu.com/security/CVE-2020-16302
-
report
https://ubuntu.com/security/CVE-2020-16303
-
report
https://ubuntu.com/security/CVE-2020-16304
-
report
https://ubuntu.com/security/CVE-2020-16305
-
report
https://ubuntu.com/security/CVE-2020-16306
-
report
https://ubuntu.com/security/CVE-2020-16307
-
report
https://ubuntu.com/security/CVE-2020-16308
-
report
https://ubuntu.com/security/CVE-2020-16309
-
report
https://ubuntu.com/security/CVE-2020-16310
-
report
https://ubuntu.com/security/CVE-2020-17538