Wind River Support Network

HomeDefectsLIN10-7725
Fixed

LIN10-7725 : Security Advisory - ghostscript - CVE-2020-14373

Created: Sep 3, 2020    Updated: Oct 14, 2020
Resolved Date: Sep 23, 2020
Found In Version: 10.17.41.1
Fix Version: 10.17.41.23
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service.

CREATE(Triage):(User=admin) [CVE-2020-14373|https://nvd.nist.gov/vuln/detail/CVE-2020-14373]

CVEs


Live chat
Online