{"schemaVersion":3,"id":"MGASA-2020-0344","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated ghostscript packages fix security vulnerabilities\n\nThe updated packages fix security vulnerabilities:\n\nA buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16287)\n\nA buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16288)\n\nA buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16289)\n\nA buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16290)\n\nA buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software\nGhostScript v9.50 allows a remote attacker to cause a denial of service via\na crafted PDF file. (CVE-2020-16291)\n\nA buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16292)\n\nA null pointer dereference vulnerability in\ncompose_group_nonknockout_nonblend_isolated_allmask_common()\nin base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote\nattacker to cause a denial of service via a crafted PDF file. (CVE-2020-16293)\n\nA buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16294)\n\nA null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16295)\n\nA buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16296)\n\nA buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16297)\n\nA buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16298)\n\nA Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16299)\n\nA buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16300)\n\nA buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16301)\n\nA buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to escalate\nprivileges via a crafted PDF file. (CVE-2020-16302)\n\nA use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c\nof Artifex Software GhostScript v9.50 allows a remote attacker\nto escalate privileges via a crafted PDF file. (CVE-2020-16303)\n\nA buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c\nof Artifex Software GhostScript v9.50 allows a remote attacker\nto escalate privileges via a crafted eps file. (CVE-2020-16304)\n\nA buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16305)\n\nA null pointer dereference vulnerability in devices/gdevtsep.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted postscript file. (CVE-2020-16306)\n\nA null pointer dereference vulnerability in devices/vector/gdevtxtw.c\nand psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote\nattacker to cause a denial of service via a crafted postscript file.\n(CVE-2020-16307)\n\nA buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16308)\n\nA buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted eps file. (CVE-2020-16309)\n\nA division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c\nof Artifex Software GhostScript v9.50 allows a remote attacker to cause\na denial of service via a crafted PDF file. (CVE-2020-16310)\n\nA buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c\nof Artifex Software GhostScript v9.50 allows a remote attacker\nto cause a denial of service via a crafted PDF file. (CVE-2020-17538)","dates":{"published":"2020-08-25T08:13:25.000Z","modified":"2026-04-16T04:42:39.415Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"ghostscript","name":"ghostscript","label":"ghostscript","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/ghostscript","purlType":"rpm","versions":[{"text":"< 9.27-1.6.mga7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.27-1.6.mga7","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2020-0344.html","label":"advisories.mageia.org/MGASA-2020-0344.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27169","label":"bugs.mageia.org/show_bug.cgi?id=27169","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.debian.org/lts/security/2020/dla-2335","label":"www.debian.org/lts/security/2020/dla-2335","hostname":"www.debian.org","tags":["WEB"]}],"lineage":{"upstream":["CVE-2020-16287","CVE-2020-16288","CVE-2020-16289","CVE-2020-16290","CVE-2020-16291","CVE-2020-16292","CVE-2020-16293","CVE-2020-16294","CVE-2020-16295","CVE-2020-16296","CVE-2020-16297","CVE-2020-16298","CVE-2020-16299","CVE-2020-16300","CVE-2020-16301","CVE-2020-16302","CVE-2020-16303","CVE-2020-16304","CVE-2020-16305","CVE-2020-16306","CVE-2020-16307","CVE-2020-16308","CVE-2020-16309","CVE-2020-16310","CVE-2020-17538"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-08-25T08:13:25.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:42:39.415Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T09:33:21.785Z","stale":false,"partial":false}}