Home > Vulnerability Database > CVE-2020-27792

Mend Vulnerability Database

CVE-2020-27792

Good to know:

Date: August 19, 2022

A heap-based buffer over write vulnerability was found in GhostScript's lp8000_print_page() function in gdevlp8k.c file. An attacker could trick a user to open a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

Language: C

Severity Score

7.1

Related Resources (5)

Url: https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe9822afb36e8a0eafc2b7

Url: https://security-tracker.debian.org/tracker/CVE-2020-27792

Url: https://lists.debian.org/debian-lts-announce/2022/09/msg00005.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2020-27792

Url: https://www.mend.io/vulnerability-database/CVE-2020-27792

Severity Score

7.1

Weakness Type (CWE)

Buffer Errors

CWE-119

Top Fix

Upgrade Version

No fix version available

CVSS v3.1

Base Score:	7.1
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	HIGH
Availability (A):	HIGH

Mend Vulnerability Database

We found results for “”

CVE-2020-27792

Good to know:

Date: August 19, 2022

Language: C

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

Do you need more information?