Ghostscript: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• High 7.1
  CVE-2020-27792

  Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c

  A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to me…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Aug 19, 2022

Revision history

1. 2025-05-01 #6

   Neue Updates von Oracle Linux aufgenommen

2. 2025-04-29 #5

   Neue Updates von Red Hat aufgenommen

3. 2023-04-05 #4

   Neue Updates von Amazon aufgenommen

4. 2023-02-22 #3

   Neue Updates von Amazon aufgenommen

5. 2022-09-27 #2

   Neue Updates von Ubuntu aufgenommen

6. 2022-09-20 #1

   Initiale Fassung

References

• National Vulnerability Database - CVE-2020-27792 vom 2022-09-20
  https://nvd.nist.gov/vuln/detail/CVE-2020-27792
• Ubuntu Security Advisory vom 2022-09-20
  https://ubuntu.com/security/notices/USN-5618-1
• PoC
  https://bugs.ghostscript.com/show_bug.cgi?id=701844
• Ubuntu Security Notice USN-5643-1 vom 2022-09-27
  https://ubuntu.com/security/notices/USN-5643-1
• Amazon Linux Security Advisory ALAS-2023-1947 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1947.html
• Amazon Linux Security Advisory ALAS-2023-1725 vom 2023-04-06
  https://alas.aws.amazon.com/ALAS-2023-1725.html
• Red Hat Security Advisory RHSA-2025:4362 vom 2025-04-30
  https://access.redhat.com/errata/RHSA-2025:4362
• Oracle Linux Security Advisory ELSA-2025-4362 vom 2025-04-30
  https://linux.oracle.com/errata/ELSA-2025-4362.html