Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2023-32324 |
CWE-ID | CWE-122 |
Exploitation vector | Local network |
Public exploit | N/A |
Vulnerable software Subscribe |
openEuler Operating systems & Components / Operating system cups-help Operating systems & Components / Operating system package or component cups-devel Operating systems & Components / Operating system package or component cups-libs Operating systems & Components / Operating system package or component cups-debuginfo Operating systems & Components / Operating system package or component cups-debugsource Operating systems & Components / Operating system package or component cups Operating systems & Components / Operating system package or component |
Vendor | openEuler |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
EUVDB-ID: #VU76761
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-32324
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the format_log_line() function cups/string.c when the "loglevel" is set to "DEBUG". A remote attacker can pass specially crafted data to the daemon, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 20.03 LTS SP1 - 22.03 LTS SP1
cups-help: before 2.2.13-14
cups-devel: before 2.2.13-14
cups-libs: before 2.2.13-14
cups-debuginfo: before 2.2.13-14
cups-debugsource: before 2.2.13-14
cups: before 2.2.13-14
CPE2.3http://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1335
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.