Vulnerabilities > CVE-2023-4504 - Out-of-bounds Write vulnerability in multiple products

CVSS 7.0 - HIGH

Attack vector

LOCAL

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

high complexity

NVD

Published: 2023-09-21

Updated: 2023-11-09

Summary

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.

Vulnerable Configurations

Part	Description	Count
Application	Openprinting Openprinting Cups 1.0 Openprinting Cups 1.0.1 Openprinting Cups 1.0.2 Openprinting Cups 1.0.3 Openprinting Cups 1.0.4 Openprinting Cups 1.0.5 Openprinting Cups 1.1 Openprinting Cups 1.1.1 Openprinting Cups 1.1.2 Openprinting Cups 1.1.2.3 Openprinting Cups 1.1.3 Openprinting Cups 1.1.4 Openprinting Cups 1.1.5 Openprinting Cups 1.1.5.1 Openprinting Cups 1.1.5.2 Openprinting Cups 1.1.6 Openprinting Cups 1.1.6.1 Openprinting Cups 1.1.6.2 Openprinting Cups 1.1.6.3 Openprinting Cups 1.1.7 Openprinting Cups 1.1.8 Openprinting Cups 1.1.9 Openprinting Cups 1.1.9.1 Openprinting Cups 1.1.10 Openprinting Cups 1.1.10.1 Openprinting Cups 1.1.11 Openprinting Cups 1.1.12 Openprinting Cups 1.1.13 Openprinting Cups 1.1.14 Openprinting Cups 1.1.15 Openprinting Cups 1.1.15.1 Openprinting Cups 1.1.16 Openprinting Cups 1.1.17 Openprinting Cups 1.1.18 Openprinting Cups 1.1.19 Openprinting Cups 1.1.20 Openprinting Cups 1.1.21 Openprinting Cups 1.1.22 Openprinting Cups 1.1.23 Openprinting Cups 1.2.0 Openprinting Cups 1.2.1 Openprinting Cups 1.2.2 Openprinting Cups 1.2.3 Openprinting Cups 1.2.4 Openprinting Cups 1.2.5 Openprinting Cups 1.2.6 Openprinting Cups 1.2.7 Openprinting Cups 1.2.8 Openprinting Cups 1.2.9 Openprinting Cups 1.2.10 Openprinting Cups 1.2.11 Openprinting Cups 1.2.12 Openprinting Cups 1.3.0 Openprinting Cups 1.3.2 Openprinting Cups 1.3.3 Openprinting Cups 1.3.4 Openprinting Cups 1.3.5 Openprinting Cups 1.3.6 Openprinting Cups 1.3.7 Openprinting Cups 1.3.8 Openprinting Cups 1.3.9 Openprinting Cups 1.3.10 Openprinting Cups 1.3.11 Openprinting Cups 1.4.0 Openprinting Cups 1.4.1 Openprinting Cups 1.4.2 Openprinting Cups 1.4.3 Openprinting Cups 1.4.4 Openprinting Cups 1.4.5 Openprinting Cups 1.4.6 Openprinting Cups 1.4.7 Openprinting Cups 1.4.8 Openprinting Cups 1.5.0 Openprinting Cups 1.5.1 Openprinting Cups 1.5.2 Openprinting Cups 1.5.3 Openprinting Cups 1.5.4 Openprinting Cups 1.6.0 Openprinting Cups 1.6.1 Openprinting Cups 1.6.2 Openprinting Cups 1.6.3 Openprinting Cups 1.6.4 Openprinting Cups 1.7.0 Openprinting Cups 1.7.1 Openprinting Cups 1.7.2 Openprinting Cups 1.7.3 Openprinting Cups 1.7.4 Openprinting Cups 1.7.5 Openprinting Cups 2.0.0 Openprinting Cups 2.0.1 Openprinting Cups 2.0.2 Openprinting Cups 2.0.3 Openprinting Cups 2.0.4 Openprinting Cups 2.1.0 Openprinting Cups 2.1.2 Openprinting Cups 2.1.3 Openprinting Cups 2.1.4 Openprinting Cups 2.2.0 Openprinting Cups 2.2.1 Openprinting Cups 2.2.2 Openprinting Cups 2.2.3 Openprinting Cups 2.2.4 Openprinting Cups 2.2.5 Openprinting Cups 2.2.6 Openprinting Cups 2.2.7 Openprinting Cups 2.2.8 Openprinting Cups 2.2.9 Openprinting Cups 2.2.10 Openprinting Cups 2.2.11 Openprinting Cups 2.2.12 Openprinting Cups 2.2.13 Openprinting Cups 2.3.0 Openprinting Cups 2.3.1 Openprinting Cups 2.3.3 Openprinting Cups 2.4.0 Openprinting Cups 2.4.1 Openprinting Cups 2.4.2 Openprinting Cups 2.4.3 Openprinting Cups 2.4.4 Openprinting Cups 2.4.5 Openprinting Cups 2.4.6 Openprinting Libppd 2.0	194
OS	Fedoraproject Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39	3
OS	Debian Debian Debian Linux 10.0	1

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References