Lucene search
Veracode Vulnerability DatabaseVERACODE:28205HistoryDec 06, 2020 - 3:28 a.m.
Denial Of Service (DoS)
2020-12-0603:28:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.003 Low
EPSS
Percentile
70.6%
ghostscript is vulnerable to denial of service (DoS). The vulnerability exists due to the buffer overflow in the image_render_color_thresh function in base/gxicolor.c , allowing a malicious user to crash the application via a crafted esp file.
References
git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=027c546e0dd11e0526f1780a7f3c2c66acffe209
bugs.ghostscript.com/show_bug.cgi?id=701816
lists.debian.org/debian-lts-announce/2020/08/msg00032.html
security-tracker.debian.org/tracker/CVE-2020-16304
security.gentoo.org/glsa/202008-20
usn.ubuntu.com/4469-1/
www.debian.org/security/2020/dsa-4748
Related
cve
cve
CVE-2020-16304
2020-08-13 03:15:14
alpinelinux
alpinelinux
CVE-2020-16304
2020-08-13 03:15:14
cvelist
cvelist
CVE-2020-16304
2020-08-13 02:09:12
redhatcve
redhatcve
CVE-2020-16304
2020-08-19 15:40:21
osv
osv
CVE-2020-16304
2020-08-13 03:15:14
Moderate: ghostscript security, bug fix, and enhancement update
2021-05-18 06:14:55
Moderate: ghostscript security, bug fix, and enhancement update
2021-05-18 06:14:55
ubuntucve
ubuntucve
CVE-2020-16304
2020-08-13 00:00:00
nvd
nvd
CVE-2020-16304
2020-08-13 03:15:14
debiancve
debiancve
CVE-2020-16304
2020-08-13 03:15:14
prion
prion
Buffer overflow
2020-08-13 03:15:00
nessus
nessus
Debian DSA-4748-1 : ghostscript - security update
2020-08-26 00:00:00
EulerOS 2.0 SP8 : ghostscript (EulerOS-SA-2020-2309)
2020-11-02 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2335-1)
2020-08-21 00:00:00
Ghostscript < 9.51 Multiple Vulnerabilities - Windows
2020-08-17 00:00:00
Ghostscript < 9.51 Multiple Vulnerabilities - Linux
2020-08-17 00:00:00
rocky
rocky
ghostscript security, bug fix, and enhancement update
2021-05-18 06:14:55
almalinux
almalinux
Moderate: ghostscript security, bug fix, and enhancement update
2021-05-18 06:14:55
debian
debian
[SECURITY] [DLA 2335-1] ghostscript security update
2020-08-20 16:31:48
[SECURITY] [DSA 4748-1] ghostscript security update
2020-08-25 19:27:37
ubuntu
ubuntu
Ghostscript vulnerabilities
2020-08-24 00:00:00
mageia
mageia
Updated ghostscript packages fix security vulnerabilities
2020-08-25 11:13:25
oraclelinux
oraclelinux
ghostscript security, bug fix, and enhancement update
2021-05-25 00:00:00
redhat
redhat
gentoo
gentoo
GPL Ghostscript: Multiple vulnerabilities
2020-08-29 00:00:00