A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
References
Link | Resource |
---|---|
https://bugs.ghostscript.com/show_bug.cgi?id=701795 | Exploit Issue Tracking Vendor Advisory |
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=7870f4951bcc6a153f317e3439e14d0e929fd231 | |
https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html | Mailing List Third Party Advisory |
https://security.gentoo.org/glsa/202008-20 | Third Party Advisory |
https://usn.ubuntu.com/4469-1/ | Third Party Advisory |
https://www.debian.org/security/2020/dsa-4748 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
24 Aug 2022, 19:23
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* |
|
References | (MLIST) https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - Mailing List, Third Party Advisory | |
References | (DEBIAN) https://www.debian.org/security/2020/dsa-4748 - Third Party Advisory | |
References | (GENTOO) https://security.gentoo.org/glsa/202008-20 - Third Party Advisory | |
References | (UBUNTU) https://usn.ubuntu.com/4469-1/ - Third Party Advisory |
Information
Published : 2020-08-13 03:15
Updated : 2024-02-04 21:00
NVD link : CVE-2020-16293
Mitre link : CVE-2020-16293
CVE.ORG link : CVE-2020-16293
JSON object : View
Products Affected
canonical
- ubuntu_linux
artifex
- ghostscript
debian
- debian_linux
CWE
CWE-476
NULL Pointer Dereference