CVE-2023-4504
OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
Summary
OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
Original description
The description as published by the source.
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2023-4504 cups Fixed in: 2.4.7-r0
- Debian DEBIAN-CVE-2023-4504 cups Fixed in: 2.3.3op2-3+deb11u4
References
- advisory github.com
- advisory github.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory takeonme.org
- web seclists.org
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org