Every CVE Search/ Get API key

CVE-2020-21710

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript...

5.5 MediumFix available

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.70%Up 0.7 points since Aug 23, 2023
90%50%10%1%

What each source reports

NVD Score used 5.5

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

Record
CVE-2020-21710
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-369
Updated
2026-11-02
CVE List No score

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

Record
CVE-2020-21710
Updated
2026-11-02
EUVDEUVD-2020-14478 No score

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

Record
EUVD-2020-14478
Updated
2026-11-03
GitHub AdvisoriesGHSA-f3hj-4f92-87v9 5.5

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript...

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

Record
GHSA-f3hj-4f92-87v9
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-369
Updated
2026-11-02
OSV 5.5

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

Record
CVE-2020-21710
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-21710 5.5

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

Record
DEBIAN-CVE-2020-21710
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2024:2966 6.5

Red Hat Security Advisory: ghostscript security update

Record
RHSA-2024:2966
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-21710 5.5

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

Record
UBUNTU-CVE-2020-21710
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:2966 No score

Low: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: Divide by zero in eps_print_page in gdevepsn.c (CVE-2020-21710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2966
Updated
2026-11-02
OSVRLSA-2024:2966 No score

Low: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: Divide by zero in eps_print_page in gdevepsn.c (CVE-2020-21710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Record
RLSA-2024:2966
Updated
2026-11-02
OSVUSN-6364-1 No score

ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-21710)

It was discovered that Ghostscript incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2020-21890)

Record
USN-6364-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ghostscript
AlmaLinux:8
before 9.27-12.el8
9.27-12.el8
ghostscript-doc
AlmaLinux:8
before 9.27-12.el8
9.27-12.el8
ghostscript-tools-dvipdf
AlmaLinux:8
before 9.27-12.el8
9.27-12.el8
ghostscript-tools-fonts
AlmaLinux:8
before 9.27-12.el8
9.27-12.el8
ghostscript-tools-printing
AlmaLinux:8
before 9.27-12.el8
9.27-12.el8
ghostscript-x11
AlmaLinux:8
before 9.27-12.el8
9.27-12.el8
libgs
AlmaLinux:8
before 9.27-12.el8
9.27-12.el8
libgs-devel
AlmaLinux:8
before 9.27-12.el8
9.27-12.el8
ghostscript
Debian:12
before 9.51~dfsg-1
9.51~dfsg-1
ghostscript
Debian:13
before 9.51~dfsg-1
9.51~dfsg-1
Show 24 moreShow less
Affected packages
PackageAffectedFixed
ghostscript
Debian:14
before 9.51~dfsg-1
9.51~dfsg-1
ghostscript
Debian:10
before 9.27~dfsg-2+deb10u9, plus listed versions
9.27~dfsg-29.27~dfsg-2+deb10u19.27~dfsg-2+deb10u29.27~dfsg-2+deb10u39.27~dfsg-2+deb10u4
Show 4 moreShow less
9.27~dfsg-2+deb10u59.27~dfsg-2+deb10u69.27~dfsg-2+deb10u79.27~dfsg-2+deb10u8
9.27~dfsg-2+deb10u9
ghostscript
Red Hat:enterprise_linux:8::appstream
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-gtk-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-x11
Red Hat:enterprise_linux:8::appstream
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-x11-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:9.27-12.el8
0:9.27-12.el8
libgs
Red Hat:enterprise_linux:8::appstream
before 0:9.27-12.el8
0:9.27-12.el8
libgs-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-debuginfo
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-debugsource
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-doc
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-gtk-debuginfo
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-tools-dvipdf
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-tools-fonts
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-tools-printing
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript-x11-debuginfo
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
libgs-debuginfo
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
libgs-devel
Red Hat:enterprise_linux:8::crb
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript
Rocky Linux:8
before 0:9.27-12.el8
0:9.27-12.el8
ghostscript
Ubuntu:Pro:16.04:LTS
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm7, plus listed versions
9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2
Show 28 moreShow less
9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm6
9.26~dfsg+0-0ubuntu0.16.04.14+esm7
ghostscript
Ubuntu:Pro:18.04:LTS
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm2, plus listed versions
9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1
Show 19 moreShow less
9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm1
9.26~dfsg+0-0ubuntu0.18.04.18+esm2
ghostscript
Ubuntu:20.04:LTS
before 9.50~dfsg-5ubuntu4.10, plus listed versions
9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3
Show 10 moreShow less
9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.9
9.50~dfsg-5ubuntu4.10

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-21710 is a medium vulnerability (CVSS 5.5) in Artifex Ghostscript, published August 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. Fixed in ghostscript 9.27-12.el8.

References

Show 14 moreShow less
MoveEnter Open