p PatchFirst

CVE-2020-14373

CVE-2020-14373

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service.

EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • ghostscript

    Versions
    • 9.25: Affected

    No fix published

  • ghostscript Debian:12

    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg-1

    Update to 9.26~dfsg-1

  • ghostscript Debian:13

    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg-1

    Update to 9.26~dfsg-1

  • ghostscript Debian:14

    Affected ranges
    • ECOSYSTEM: < 9.26~dfsg-1

    Update to 9.26~dfsg-1

Original sources

Check your server →