A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.

SO-AND-SO reports :

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.

The remote host is affected by the vulnerability described in GLSA-202008-20 (GPL Ghostscript: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GPL Ghostscript. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

This update for ghostscript fixes the following issues :

  - fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox     Breakout) cf.
    https://bugs.ghostscript.com/show_bug.cgi?id=702582     (bsc#1174415)

This update was imported from the SUSE:SLE-15:Update update project.

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code,.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ghostscript fixes the following issues :

fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout) cf.
https://bugs.ghostscript.com/show_bug.cgi?id=702582 (bsc#1174415)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
145149	FreeBSD : Ghostscript -- SAFER Sandbox Breakout (62642942-590f-11eb-a0dc-8c164582fbac)	Nessus	FreeBSD Local Security Checks	critical
140068	GLSA-202008-20 : GPL Ghostscript: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
139355	openSUSE Security Update : ghostscript (openSUSE-2020-1146)	Nessus	SuSE Local Security Checks	critical
139312	Ubuntu 20.04 LTS : Ghostscript vulnerability (USN-4445-1)	Nessus	Ubuntu Local Security Checks	critical
139305	openSUSE Security Update : ghostscript (openSUSE-2020-1142)	Nessus	SuSE Local Security Checks	critical
139223	SUSE SLES12 Security Update : ghostscript (SUSE-SU-2020:2097-1)	Nessus	SuSE Local Security Checks	critical
139222	SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2020:2095-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2020-15900

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical