Vulnerability Details CVE-2020-14373
A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.7%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
References
- https://bugs.ghostscript.com/show_bug.cgi?id=702851
- https://bugzilla.redhat.com/show_bug.cgi?id=1873239
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=ece5cbbd9979cd35737b00e68267762d72feb2ea%3Bhp=1ef5f08f2c2e27efa978f0010669ff22355c385f
- https://bugs.ghostscript.com/show_bug.cgi?id=702851
- https://bugzilla.redhat.com/show_bug.cgi?id=1873239
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=ece5cbbd9979cd35737b00e68267762d72feb2ea%3Bhp=1ef5f08f2c2e27efa978f0010669ff22355c385f
Products affected by CVE-2020-14373
-
cpe:2.3:a:artifex:ghostscript:9.25
-
cpe:2.3:o:redhat:enterprise_linux:7.0
-
cpe:2.3:o:redhat:enterprise_linux:8.0