CVE-2023-32324

medium

Published 2023-11-07 · Modified 2023-11-14

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

5.5

Description

RHSA-2023:7165: cups security and bug fix update (Moderate)

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Red Hat Errata — Red Hat Inc. · View original ↗ · Open-Errata-API

Description cups: heap buffer overflow may lead to DoS CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Errata / fixed releases ProductPackageAdvisoryReleased Red Hat Enterprise Linux 8cups-1:2.2.6-54.el8_9RHSA-2023:71652023-11-14T00:00:00Z Red Hat Enterprise Linux 8cups-1:2.2.6-54.el8_9RHSA-2023:71652023-11-14T00:00:00Z Red Hat Enterprise Linux 8.6 Extended Update…

Description

cups: heap buffer overflow may lead to DoS

CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

Errata / fixed releases

Product	Package	Advisory	Released
Red Hat Enterprise Linux 8	`cups-1:2.2.6-54.el8_9`	RHSA-2023:7165	2023-11-14T00:00:00Z
Red Hat Enterprise Linux 8	`cups-1:2.2.6-54.el8_9`	RHSA-2023:7165	2023-11-14T00:00:00Z
Red Hat Enterprise Linux 8.6 Extended Update Support	`cups-1:2.2.6-45.el8_6.4`	RHSA-2024:1101	2024-03-05T00:00:00Z
Red Hat Enterprise Linux 8.8 Extended Update Support	`cups-1:2.2.6-51.el8_8.3`	RHSA-2024:1409	2024-03-19T00:00:00Z
Red Hat Enterprise Linux 9	`cups-1:2.3.3op2-21.el9`	RHSA-2023:6596	2023-11-07T00:00:00Z
Red Hat Enterprise Linux 9	`cups-1:2.3.3op2-21.el9`	RHSA-2023:6596	2023-11-07T00:00:00Z

Package state

Product	Package	State
Red Hat Enterprise Linux 6	`cups`	Out of support scope
Red Hat Enterprise Linux 7	`cups`	Will not fix

Apply commands

bash fix

Apply RHSA-2023:7165 for Red Hat Enterprise Linux 8

yum update -y cups
# or:
dnf upgrade -y cups

OS impact

SUSE Affected 1 release

Version	Status	Fixed in
—	Affected	—

AlmaLinux Fixed 1 release

Version	Status	Fixed in
9	Fixed	`cups-devel-2.3.3op2-21.el9.aarch64.rpm`

Debian Fixed 5 releases

Version	Status	Fixed in
trixie	Fixed	`2.4.2-4`
sid	Fixed	`2.4.2-4`
forky	Fixed	`2.4.2-4`
bullseye	Fixed	`2.3.3op2-3+deb11u3`
bookworm	Fixed	`2.4.2-3+deb12u1`

Red Hat Fixed 2 releases

Version	Status	Fixed in
9	Fixed	—
8	Fixed	—

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.