CVE-2020-16287

MEDIUM5.5EPSS 1.4%

ghostscript - security update

Published: 8/13/2020Modified: 4/28/2026

Description

A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.

Affected packages (4)

Alpine/ghostscriptfrom 0, < 9.51-r0
Debian/ghostscriptfrom 0, < 9.51~dfsg-1
Debian/ghostscriptfrom 0, < 9.26a~dfsg-0+deb9u7
Debian/ghostscriptfrom 0, < 9.27~dfsg-2+deb10u4

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2020-16287
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2020-16287