OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cups-lpdUpgrade cups-clientUpgrade cups-ipptoolUpgrade cups-printerappUpgrade cups-develUpgrade cupsUpgrade cups-filesystemUpgrade cups-libs | Nov 16, 2023 | Jun 1, 2023 |
| Alpine Linux | — | Upgrade cups | Mar 26, 2024 | Jun 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade cups-libsUpgrade cups-clientUpgrade cups-filesystemUpgrade cups-ipptoolUpgrade cups-debuginfoUpgrade cupsUpgrade cups-lpdUpgrade cups-devel | Aug 9, 2023 | Jun 1, 2023 |
| Amazon_linux | — | Upgrade cups | Aug 9, 2023 | Jun 1, 2023 |
| Amazon_linux_2023 | — | Upgrade cupsUpgrade cups-clientUpgrade cups-client-debuginfoUpgrade cups-ipptool-debuginfoUpgrade cups-develUpgrade cups-printerapp-debuginfoUpgrade cups-lpdUpgrade cups-printerappUpgrade cups-debugsourceUpgrade cups-filesystemUpgrade cups-libsUpgrade cups-lpd-debuginfoUpgrade cups-ipptoolUpgrade cups-debuginfoUpgrade cups-libs-debuginfo | Feb 17, 2025 | Jun 1, 2023 |
| Centos_linux | — | Upgrade cups-develUpgrade cups-lpdUpgrade cups-lpd-debuginfoUpgrade cups-printerappUpgrade cups-ipptool-debuginfoUpgrade cups-libs-debuginfoUpgrade cups-client-debuginfoUpgrade cupsUpgrade cups-filesystemUpgrade cups-debuginfoUpgrade cups-debugsourceUpgrade cups-ipptoolUpgrade cups-printerapp-debuginfoUpgrade cups-clientUpgrade cups-libs | Nov 8, 2023 | Jun 1, 2023 |
| Debian | — | Upgrade cups | Jun 5, 2023 | Jun 1, 2023 |
| Gentoo Linux | — | Upgrade net-print/cups. | Feb 19, 2024 | Jun 1, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cups-libs | Jan 10, 2024 | Jun 1, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade cups-libs | Jan 10, 2024 | Jun 1, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cups-libsUpgrade cups-lpdUpgrade cups-filesystemUpgrade cups-clientUpgrade cupsUpgrade cups-devel | Jan 10, 2024 | Jun 1, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cups-libs | Aug 9, 2023 | Jun 1, 2023 |
| Oracle_linux | — | Upgrade cups-ipptoolUpgrade cups-filesystemUpgrade cups-libsUpgrade cups-develUpgrade cups-printerappUpgrade cupsUpgrade cups-lpdUpgrade cups-client | Nov 16, 2023 | Jun 1, 2023 |
| Redhat_linux | — | Upgrade cups-printerappUpgrade cups-debugsourceUpgrade cups-lpd-debuginfoUpgrade cups-debuginfoUpgrade cups-ipptoolUpgrade cups-ipptool-debuginfoUpgrade cups-libsNo solution existsUpgrade cups-printerapp-debuginfoUpgrade cups-clientUpgrade cups-filesystemUpgrade cups-libs-debuginfoUpgrade cups-develUpgrade cupsUpgrade cups-client-debuginfoUpgrade cups-lpd | Nov 8, 2023 | Jun 1, 2023 |
| Suse | — | Upgrade cups-clientUpgrade cups-devel-32bitUpgrade cups-develUpgrade libcupsmime1-32bitUpgrade libcupsppdc1Upgrade cups-configUpgrade libcupscgi1Upgrade cupsUpgrade libcups2Upgrade cups-libs-32bitUpgrade cups-ddkUpgrade libcups2-32bitUpgrade libcupsimage2-32bitUpgrade libcupsmime1Upgrade libcupsimage2Upgrade cups-libsUpgrade libcupsppdc1-32bitUpgrade libcupscgi1-32bit | Jun 2, 2023 | Jun 1, 2023 |
| Ubuntu | — | Upgrade cups (Ubuntu Pro)Upgrade cups | Jun 2, 2023 | Jun 1, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub