CVE-2023-4504CWE-122

OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

High · published September 21, 2023

CVSS v3.1
7.0
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00664 · 51.1th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2023-09-21T22:47Z
EPSS history
Timeline
  • 21 SEP 22:47Z
    OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
    cvelistv5