CVE-2020-21710
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript...
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
- Record
CVE-2020-21710- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-369
- Updated
- 2026-11-02
CVE List No score
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
- Record
CVE-2020-21710- Updated
- 2026-11-02
EUVDEUVD-2020-14478 No score
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
- Record
EUVD-2020-14478- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f3hj-4f92-87v9
5.5
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript...
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
- Record
GHSA-f3hj-4f92-87v9- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-369
- Updated
- 2026-11-02
OSV
5.5
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
- Record
CVE-2020-21710- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-21710
5.5
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
- Record
DEBIAN-CVE-2020-21710- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVRHSA-2024:2966
6.5
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2024:2966- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-21710
5.5
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
- Record
UBUNTU-CVE-2020-21710- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2024:2966 No score
Low: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
- ghostscript: Divide by zero in eps_print_page in gdevepsn.c (CVE-2020-21710)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2966- Updated
- 2026-11-02
OSVRLSA-2024:2966 No score
Low: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
- ghostscript: Divide by zero in eps_print_page in gdevepsn.c (CVE-2020-21710)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
- Record
RLSA-2024:2966- Updated
- 2026-11-02
OSVUSN-6364-1 No score
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-21710)
It was discovered that Ghostscript incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2020-21890)
- Record
USN-6364-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlmaLinux:8 |
before 9.27-12.el8 | 9.27-12.el8 |
ghostscript-docAlmaLinux:8 |
before 9.27-12.el8 | 9.27-12.el8 |
ghostscript-tools-dvipdfAlmaLinux:8 |
before 9.27-12.el8 | 9.27-12.el8 |
ghostscript-tools-fontsAlmaLinux:8 |
before 9.27-12.el8 | 9.27-12.el8 |
ghostscript-tools-printingAlmaLinux:8 |
before 9.27-12.el8 | 9.27-12.el8 |
ghostscript-x11AlmaLinux:8 |
before 9.27-12.el8 | 9.27-12.el8 |
libgsAlmaLinux:8 |
before 9.27-12.el8 | 9.27-12.el8 |
libgs-develAlmaLinux:8 |
before 9.27-12.el8 | 9.27-12.el8 |
ghostscriptDebian:12 |
before 9.51~dfsg-1 | 9.51~dfsg-1 |
ghostscriptDebian:13 |
before 9.51~dfsg-1 | 9.51~dfsg-1 |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscriptDebian:14 |
before 9.51~dfsg-1 | 9.51~dfsg-1 |
ghostscriptDebian:10 |
before 9.27~dfsg-2+deb10u9, plus listed versions 9.27~dfsg-29.27~dfsg-2+deb10u19.27~dfsg-2+deb10u29.27~dfsg-2+deb10u39.27~dfsg-2+deb10u4 Show 4 moreShow less9.27~dfsg-2+deb10u59.27~dfsg-2+deb10u69.27~dfsg-2+deb10u79.27~dfsg-2+deb10u8 |
9.27~dfsg-2+deb10u9 |
ghostscriptRed Hat:enterprise_linux:8::appstream |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-x11Red Hat:enterprise_linux:8::appstream |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
libgsRed Hat:enterprise_linux:8::appstream |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
libgs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-docRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-gtk-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-tools-dvipdfRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-tools-fontsRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-tools-printingRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscript-x11-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
libgs-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
libgs-develRed Hat:enterprise_linux:8::crb |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscriptRocky Linux:8 |
before 0:9.27-12.el8 | 0:9.27-12.el8 |
ghostscriptUbuntu:Pro:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm7, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 28 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm6 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm7 |
ghostscriptUbuntu:Pro:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm2, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 19 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm1 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm2 |
ghostscriptUbuntu:20.04:LTS |
before 9.50~dfsg-5ubuntu4.10, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 10 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.9 |
9.50~dfsg-5ubuntu4.10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-21710 is a medium vulnerability (CVSS 5.5) in Artifex Ghostscript, published August 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. Fixed in ghostscript 9.27-12.el8.
References
bugs.ghostscript.com/show_bug.cgi?id=701843
git.ghostscript.com?p=ghostpdl.git%3Ba=commit%3Bh=4e713293de84b689c4ab358f3e110ea54aa81925
lists.debian.org/debian-lts-announce/2023/09/msg00029.html
nvd.nist.gov/vuln/detail/CVE-2020-21710
git.ghostscript.com?p=ghostpdl.git;a=commit;h=4e713293de84b689c4ab358f3e110ea54aa81925
github.com/advisories/GHSA-f3hj-4f92-87v9
Show 14 moreShow less
access.redhat.com/errata/RHSA-2024:2966
access.redhat.com/security/cve/CVE-2020-21710
bugzilla.redhat.com/2235001
errata.almalinux.org/8/ALSA-2024-2966.html
security-tracker.debian.org/tracker/CVE-2020-21710
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=2235001
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2966.json
cve.org/CVERecord?id=CVE-2020-21710
errata.rockylinux.org/RLSA-2024:2966
ubuntu.com/security/CVE-2020-21710
ubuntu.com/security/notices/USN-6364-1
ubuntu.com/security/CVE-2020-21890