CVE-2023-4504
OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
Résumé
OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2023-4504 cups Corrigé dans: 2.4.7-r0
- Debian DEBIAN-CVE-2023-4504 cups Corrigé dans: 2.3.3op2-3+deb11u4
Références
- advisory github.com
- advisory github.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory takeonme.org
- web seclists.org
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org