Ghostscript Security Restriction Bypass Vulnerability

Last Update Date: 4 Aug 2020 10:07 Release Date: 4 Aug 2020 3680 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

A vulnerability was identified in Ghostscript, a remote attacker could exploit this vulnerability to bypass security restriction on the targeted system.

Impact

Security Restriction Bypass

System / Technologies affected

Ghostscript version 9.50
Ghostscript version 9.52

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5d499272b95a6b890a1397e11d20937de000d31b

Vulnerability Identifier

CVE-2020-15900

Source

AusCERT