vulnerability

Debian: CVE-2020-27792: ghostscript -- security update

Severity
6
CVSS
(AV:L/AC:M/Au:N/C:N/I:C/A:C)
Published
08/19/2022
Added
09/06/2022
Modified
01/30/2025

Description

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

Solution

debian-upgrade-ghostscript
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.