p PatchFirst

CVE-2023-32324

CVE-2023-32324 · OpenPrinting CUPS vulnerable to heap buffer overflow

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.

CVSS 7.5 · High · EPSS 1.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • cups

    Versions
    • <= 2.4.2: Affected

    No fix published

  • cups Debian:12

    Versions
    • 2.4.2-3
    Affected ranges
    • ECOSYSTEM: < 2.4.2-3+deb12u1

    Update to 2.4.2-3+deb12u1

  • cups Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.4.2-4

    Update to 2.4.2-4

  • cups Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.4.2-4

    Update to 2.4.2-4

  • cups Ubuntu:Pro:16.04:LTS

    Versions
    • 2.1.0-4ubuntu3
    • 2.1.0-5
    • 2.1.0-6
    • 2.1.0-6ubuntu1
    • 2.1.0-7
    • 2.1.2-1
    • 2.1.2-2
    • 2.1.3-1
    • 2.1.3-1build1
    • 2.1.3-3
    • 2.1.3-4
    • 2.1.3-4ubuntu0.2
    • 2.1.3-4ubuntu0.3
    • 2.1.3-4ubuntu0.4
    • 2.1.3-4ubuntu0.5
    • 2.1.3-4ubuntu0.6
    • 2.1.3-4ubuntu0.7
    • 2.1.3-4ubuntu0.8
    • 2.1.3-4ubuntu0.9
    • 2.1.3-4ubuntu0.10
    • 2.1.3-4ubuntu0.11
    • 2.1.3-4ubuntu0.11+esm1
    Affected ranges
    • ECOSYSTEM: < 2.1.3-4ubuntu0.11+esm2

    Update to 2.1.3-4ubuntu0.11+esm2

  • cups Ubuntu:18.04:LTS

    Versions
    • 2.2.4-7ubuntu2
    • 2.2.5-2
    • 2.2.6-2
    • 2.2.6-3
    • 2.2.6-4
    • 2.2.6-5
    • 2.2.7-1ubuntu1
    • 2.2.7-1ubuntu2
    • 2.2.7-1ubuntu2.1
    • 2.2.7-1ubuntu2.2
    • 2.2.7-1ubuntu2.3
    • 2.2.7-1ubuntu2.4
    • 2.2.7-1ubuntu2.5
    • 2.2.7-1ubuntu2.6
    • 2.2.7-1ubuntu2.7
    • 2.2.7-1ubuntu2.8
    • 2.2.7-1ubuntu2.9
    Affected ranges
    • ECOSYSTEM: < 2.2.7-1ubuntu2.10

    Update to 2.2.7-1ubuntu2.10

  • cups Ubuntu:20.04:LTS

    Versions
    • 2.2.12-2ubuntu1
    • 2.3.0-6
    • 2.3.0-7
    • 2.3.0-7ubuntu1
    • 2.3.1-1ubuntu1
    • 2.3.1-2
    • 2.3.1-4
    • 2.3.1-7
    • 2.3.1-9ubuntu1
    • 2.3.1-9ubuntu1.1
    • 2.3.1-9ubuntu1.2
    Affected ranges
    • ECOSYSTEM: < 2.3.1-9ubuntu1.3

    Update to 2.3.1-9ubuntu1.3

  • cups Ubuntu:22.04:LTS

    Versions
    • 2.3.3op2-7ubuntu2
    • 2.4.1op1-1ubuntu1
    • 2.4.1op1-1ubuntu2
    • 2.4.1op1-1ubuntu3
    • 2.4.1op1-1ubuntu4
    • 2.4.1op1-1ubuntu4.1
    Affected ranges
    • ECOSYSTEM: < 2.4.1op1-1ubuntu4.2

    Update to 2.4.1op1-1ubuntu4.2

Original sources

Check your server →