Vulnerabilities > CVE-2023-32324 - Out-of-bounds Write vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

openprinting

debian

CWE-787

NVD

Published: 2023-06-01

Updated: 2023-06-08

Summary

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.

Vulnerable Configurations

Part	Description	Count
Application	Openprinting Openprinting Cups 1.0 Openprinting Cups 1.0.1 Openprinting Cups 1.0.2 Openprinting Cups 1.0.3 Openprinting Cups 1.0.4 Openprinting Cups 1.0.5 Openprinting Cups 1.1 Openprinting Cups 1.1.1 Openprinting Cups 1.1.2 Openprinting Cups 1.1.2.3 Openprinting Cups 1.1.3 Openprinting Cups 1.1.4 Openprinting Cups 1.1.5 Openprinting Cups 1.1.5.1 Openprinting Cups 1.1.5.2 Openprinting Cups 1.1.6 Openprinting Cups 1.1.6.1 Openprinting Cups 1.1.6.2 Openprinting Cups 1.1.6.3 Openprinting Cups 1.1.7 Openprinting Cups 1.1.8 Openprinting Cups 1.1.9 Openprinting Cups 1.1.9.1 Openprinting Cups 1.1.10 Openprinting Cups 1.1.10.1 Openprinting Cups 1.1.11 Openprinting Cups 1.1.12 Openprinting Cups 1.1.13 Openprinting Cups 1.1.14 Openprinting Cups 1.1.15 Openprinting Cups 1.1.15.1 Openprinting Cups 1.1.16 Openprinting Cups 1.1.17 Openprinting Cups 1.1.18 Openprinting Cups 1.1.19 Openprinting Cups 1.1.20 Openprinting Cups 1.1.21 Openprinting Cups 1.1.22 Openprinting Cups 1.1.23 Openprinting Cups 1.2.0 Openprinting Cups 1.2.1 Openprinting Cups 1.2.2 Openprinting Cups 1.2.3 Openprinting Cups 1.2.4 Openprinting Cups 1.2.5 Openprinting Cups 1.2.6 Openprinting Cups 1.2.7 Openprinting Cups 1.2.8 Openprinting Cups 1.2.9 Openprinting Cups 1.2.10 Openprinting Cups 1.2.11 Openprinting Cups 1.2.12 Openprinting Cups 1.3.0 Openprinting Cups 1.3.2 Openprinting Cups 1.3.3 Openprinting Cups 1.3.4 Openprinting Cups 1.3.5 Openprinting Cups 1.3.6 Openprinting Cups 1.3.7 Openprinting Cups 1.3.8 Openprinting Cups 1.3.9 Openprinting Cups 1.3.10 Openprinting Cups 1.3.11 Openprinting Cups 1.4.0 Openprinting Cups 1.4.1 Openprinting Cups 1.4.2 Openprinting Cups 1.4.3 Openprinting Cups 1.4.4 Openprinting Cups 1.4.5 Openprinting Cups 1.4.6 Openprinting Cups 1.4.7 Openprinting Cups 1.4.8 Openprinting Cups 1.5.0 Openprinting Cups 1.5.1 Openprinting Cups 1.5.2 Openprinting Cups 1.5.3 Openprinting Cups 1.5.4 Openprinting Cups 1.6.0 Openprinting Cups 1.6.1 Openprinting Cups 1.6.2 Openprinting Cups 1.6.3 Openprinting Cups 1.6.4 Openprinting Cups 1.7.0 Openprinting Cups 1.7.1 Openprinting Cups 1.7.2 Openprinting Cups 1.7.3 Openprinting Cups 1.7.4 Openprinting Cups 1.7.5 Openprinting Cups 2.0.0 Openprinting Cups 2.0.1 Openprinting Cups 2.0.2 Openprinting Cups 2.0.3 Openprinting Cups 2.0.4 Openprinting Cups 2.1.0 Openprinting Cups 2.1.2 Openprinting Cups 2.1.3 Openprinting Cups 2.1.4 Openprinting Cups 2.2.0 Openprinting Cups 2.2.1 Openprinting Cups 2.2.2 Openprinting Cups 2.2.3 Openprinting Cups 2.2.4 Openprinting Cups 2.2.5 Openprinting Cups 2.2.6 Openprinting Cups 2.2.7 Openprinting Cups 2.2.8 Openprinting Cups 2.2.9 Openprinting Cups 2.2.10 Openprinting Cups 2.2.11 Openprinting Cups 2.2.12 Openprinting Cups 2.2.13 Openprinting Cups 2.3.0 Openprinting Cups 2.3.1 Openprinting Cups 2.3.3 Openprinting Cups 2.4.0 Openprinting Cups 2.4.1 Openprinting Cups 2.4.2	189
OS	Debian Debian Debian Linux 10.0	1

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References