Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2020-27792

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 1 year ago

Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

References

https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update mailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST
RHSA-2025:4362 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST
RHSA-2025:4362 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST
RHSA-2025:4362 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHAT
RHBZ#2247179 x_refsource_REDHATissue-tracking
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe…
https://access.redhat.com/security/cve/CVE-2020-27792 vdb-entryx_refsource_REDHATx_transferred
https://bugs.ghostscript.com/show_bug.cgi?id=701844 x_transferredx_refsource_MISC
RHBZ#2247179 x_refsource_REDHATissue-trackingx_transferred
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=4f6bc662909ab79e… x_transferredx_refsource_MISC
https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe… x_transferred
[debian-lts-announce] 20220903 [SECURITY] [DLA 3096-1] ghostscript security update x_transferredmailing-listx_refsource_MLIST

Affected products

ghostscript

*
==9.27

Matching in nixpkgs

pkgs.ghostscriptX

PostScript interpreter (mainline version)

nixos-unstable 10.04.0
- nixpkgs-unstable 10.04.0
- nixos-unstable-small 10.04.0

pkgs.ghostscript_headless

PostScript interpreter (mainline version)

nixos-unstable 10.04.0
- nixpkgs-unstable 10.04.0
- nixos-unstable-small 10.04.0

pkgs.haskellPackages.ghostscript-parallel

Let Ghostscript render pages in parallel

nixos-unstable 0.0.1
- nixpkgs-unstable 0.0.1
- nixos-unstable-small 0.0.1

Package maintainers

@tobim Tobias Mayer <nix@tobim.fastmail.fm>