Vulnerability · Published Jul 28, 2020 · Assigned by mitre
CVE-2020-15900
Critical 9.8
In plain English
A critical-severity security flaw in the ghostscript package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.2% (higher than 93% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)5.2%top 7.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | ghostscript | 9.52.1~dfsg-1 | DEBIAN-CVE-2020-15900 |
| Debian:13 | ghostscript | 9.52.1~dfsg-1 | DEBIAN-CVE-2020-15900 |
| Debian:14 | ghostscript | 9.52.1~dfsg-1 | DEBIAN-CVE-2020-15900 |
Affected products (as reported)
References
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=log x_refsource_MISC
- https://github.com/ArtifexSoftware/ghostpdl/commits/master/psi/zstring.c x_refsource_MISC
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=5d499272b95a6b890a1397e11d20937de000d31b x_refsource_MISC
- https://github.com/ArtifexSoftware/ghostpdl/commit/5d499272b95a6b890a1397e11d20937de000d31b x_refsource_MISC
- https://artifex.com/security-advisories/CVE-2020-15900 x_refsource_CONFIRM
- openSUSE-SU-2020:1142 vendor-advisory, x_refsource_SUSE
- openSUSE-SU-2020:1146 vendor-advisory, x_refsource_SUSE
- USN-4445-1 vendor-advisory, x_refsource_UBUNTU
- GLSA-202008-20 vendor-advisory, x_refsource_GENTOO