CVE-2020-17538

A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.

• CWE-787

• https://bugs.ghostscript.com/show_bug.cgi?id=701792Exploit, Issue Tracking, Vendor Advisory
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/contrib/lips4/gdevlips.c?h=ghostscript-9.18#n148
• https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=9f39ed4a92578a020ae10459643e1fe72573d134
• https://lists.debian.org/debian-lts-announce/2020/08/msg00032.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202008-20Third Party Advisory
• https://usn.ubuntu.com/4469-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4748Third Party Advisory
• https://bugs.ghostscript.com/show_bug.cgi?id=701792Exploit, Issue Tracking, Vendor Advisory
• https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=9f39ed4a92578a020ae10459643e1fe72573d134Broken Link
• https://lists.debian.org/debian-lts-announce/2020/08/msg00032.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202008-20Third Party Advisory
• https://usn.ubuntu.com/4469-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4748Third Party Advisory

Published

Aug 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17532When handler-router component is enabled in servicecomb-java…8.8
• CVE-2020-17533Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.…8.1
• CVE-2020-17534There exists a race condition between the deletion of the te…7
• CVE-2020-17535Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-17536Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-17537Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-1754In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewi…4.3
• CVE-2020-17541Libjpeg-turbo all version have a stack-based buffer overflow…8.8
• CVE-2020-17542Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote at…5.4
• CVE-2020-1755In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded…5.3
• CVE-2020-17551ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.…4.8
• CVE-2020-1756In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficien…7.2