CVE-2020-21710: 
Ghostscript vulnerability analysis and mitigation

A divide by zero vulnerability (CVE-2020-21710) was discovered in eps_print_page function within gdevepsn.c of Artifex Software GhostScript 9.50. The vulnerability was reported on November 5, 2019, and publicly disclosed on August 22, 2023. This security flaw affects the GhostScript software, which is an interpreter for PostScript and PDF files (NVD, Debian LTS).

The vulnerability occurs in the eps_print_page function within gdevepsn.c when processing custom resolutions that are too low, leading to a division by zero condition. The issue has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability is classified as CWE-369 (Divide By Zero) (NVD, Ghostscript Bug).

When exploited, this vulnerability allows remote attackers to cause a denial of service condition by opening a specially crafted PDF file. The impact is limited to availability, with no effects on confidentiality or integrity of the system (NVD).

The vulnerability has been fixed through patches released in multiple commits. The fix was implemented in GhostScript versions after 9.50. Various Linux distributions have also released security updates to address this vulnerability, including Debian and Red Hat Enterprise Linux (Debian LTS, Red Hat).