Vulnerabilities > CVE-2020-16307 - NULL Pointer Dereference vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2020-08-13

Updated: 2024-11-21

Summary

A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51.

Vulnerable Configurations

Part	Description	Count
Application	Artifex Artifex Ghostscript 9.50	1
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Canonical Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04	3

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=407c98a38c3a6ac1681144ed45cc2f4fc374c91f
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=407c98a38c3a6ac1681144ed45cc2f4fc374c91f
https://bugs.ghostscript.com/show_bug.cgi?id=701822
https://bugs.ghostscript.com/show_bug.cgi?id=701822
https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
https://security.gentoo.org/glsa/202008-20
https://security.gentoo.org/glsa/202008-20
https://usn.ubuntu.com/4469-1/
https://usn.ubuntu.com/4469-1/
https://www.debian.org/security/2020/dsa-4748
https://www.debian.org/security/2020/dsa-4748