{"id":"CVE-2020-15900","aliases":["ALPINE-CVE-2020-15900","BELL-CVE-2020-15900","DEBIAN-CVE-2020-15900","EUVD-2020-7873","GHSA-mwgq-j58h-pv6j","SUSE-SU-2020:2095-1","SUSE-SU-2020:2097-1","UBUNTU-CVE-2020-15900","USN-4445-1","openSUSE-SU-2020:1142-1","openSUSE-SU-2020:1146-1","openSUSE-SU-2024:10783-1"],"status":"published","title":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard...","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.05186,"percentile":0.92568,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-191","CWE-787"],"published":"2020-07-28T15:17:14Z","modified":"2026-10-26T12:00:47Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"ghostscript","fixed_in":["9.50-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"ghostscript","fixed_in":["9.52-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ghostscript","fixed_in":["9.52.1~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ghostscript","fixed_in":["9.52.1~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ghostscript","fixed_in":["9.52.1~dfsg-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"ghostscript","fixed_in":["9.52-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"ghostscript","fixed_in":["9.52-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ghostscript","fixed_in":["9.52-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ghostscript","fixed_in":["9.52-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ghostscript","fixed_in":["9.52-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ghostscript","fixed_in":["9.52-3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"ghostscript","fixed_in":["9.52-23.39.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","fixed_in":["9.50~dfsg-5ubuntu4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ghostscript","fixed_in":["9.52-lp151.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ghostscript-mini","fixed_in":["9.52-lp151.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"ghostscript","fixed_in":["9.52-lp152.2.4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"ghostscript-mini","fixed_in":["9.52-lp152.2.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52.1~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52.1~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52.1~dfsg-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.39.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.1"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.1"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-lp151.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ghostscript-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-lp151.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-lp152.2.4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ghostscript-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-lp152.2.4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-2.2"}]}],"bundled":44}],"products":[{"vendor":"artifex","product":"ghostscript"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"http://git.ghostscript.com/?p=ghostpdl.git%3Ba=log","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://github.com/ArtifexSoftware/ghostpdl/commits/master/psi/zstring.c","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=5d499272b95a6b890a1397e11d20937de000d31b","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://github.com/ArtifexSoftware/ghostpdl/commit/5d499272b95a6b890a1397e11d20937de000d31b","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://artifex.com/security-advisories/CVE-2020-15900","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4445-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202008-20","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15900"},{"url":"https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=5d499272b95a6b890a1397e11d20937de000d31b"},{"url":"http://git.ghostscript.com/?p=ghostpdl.git;a=log"},{"url":"https://github.com/advisories/GHSA-mwgq-j58h-pv6j"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-15900","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-15900","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-15900","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202095-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1174415","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15900","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202097-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-15900","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4445-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15900","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZOZGE4F5XBUTATYZ4I2RVVZ5BKK4QJ6K/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C5WR54RSQPQ7JCYHLHJVYW76ES7QXPCJ/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3781","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-15900","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","status":"published","published":"2020-07-28T15:17:14Z","modified":"2024-08-04T13:30:23.341Z","updated_at":"2026-11-02T14:35:50.545879Z"}],"euvd":[{"id":"EUVD-2020-7873","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","status":"published","published":"2020-07-28T15:17:14Z","modified":"2024-08-04T13:30:23Z","updated_at":"2026-11-03T03:07:29.843843Z"}],"ghsa":[{"id":"GHSA-mwgq-j58h-pv6j","title":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard...","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","status":"published","published":"2022-05-24T17:24:33Z","modified":"2023-01-29T05:03:36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:45:21.37961Z"}],"nvd":[{"id":"CVE-2020-15900","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","status":"published","published":"2020-07-28T16:15:12.84Z","modified":"2026-06-17T02:57:22.443Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-191","CWE-787"],"updated_at":"2026-11-02T14:06:10.086163Z"}],"osv":[{"id":"ALPINE-CVE-2020-15900","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","status":"published","published":"2020-07-28T16:15:12.84Z","modified":"2026-10-26T11:17:55.136078171Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-15900","title":"CVE-2020-15900 does not affect BellSoft software","status":"withdrawn","published":"2020-07-28T16:15:00Z","modified":"2026-01-26T09:49:24.453381Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-15900","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","status":"published","published":"2020-07-28T16:15:12.84Z","modified":"2026-10-24T14:19:41.847184946Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"DEBIAN-CVE-2020-15900","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","status":"published","published":"2020-07-28T16:15:12.84Z","modified":"2026-10-26T12:00:47.074752805Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"UBUNTU-CVE-2020-15900","description":"A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.","status":"published","published":"2020-07-28T16:15:00Z","modified":"2026-04-22T12:31:10.261797Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"openSUSE-SU-2020:1142-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n- fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout)\n  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582\n  (bsc#1174415)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-08-03T18:18:48Z","modified":"2026-02-04T03:30:12.203821Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1146-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n- fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout)\n  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582\n  (bsc#1174415)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-08-04T12:19:41Z","modified":"2026-02-04T02:30:20.031625Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10783-1","title":"ghostscript-9.54.0-2.2 on GA media","description":"These are all security issues fixed in the ghostscript-9.54.0-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:38:19.404781Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:2095-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n- fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout)\n  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582\n  (bsc#1174415)\n","status":"published","published":"2020-07-30T15:10:49Z","modified":"2026-02-04T03:58:55.554131Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2097-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n- fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout)\n  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582\n  (bsc#1174415)\n","status":"published","published":"2020-07-30T15:11:40Z","modified":"2026-02-04T04:19:59.680706Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4445-1","title":"ghostscript vulnerability","description":"It was discovered that Ghostscript incorrectly handled certain PostScript\nfiles. If a user or automated system were tricked into processing a\nspecially crafted file, a remote attacker could possibly use this issue to\naccess arbitrary files, execute arbitrary code,\n","status":"published","published":"2020-08-03T13:07:04Z","modified":"2026-04-22T10:06:27.887077Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}