CVE-2023-32324— OpenPrinting CUPS vulnerable to heap buffer overflow
Quick assessment
Affected
OpenPrinting cups
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
cups是cups开源的一个类 Unix 操作系统的组合式印刷系统。 OpenPrinting CUPS 2.4.2及之前版本存在安全漏洞，该漏洞源于存在堆缓冲区溢出漏洞，允许远程攻击者发起拒绝服务(DoS)攻击。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-32324
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenPrinting CUPS vulnerable to heap buffer overflow
Source: CVE Program / CVE List V5
Vulnerability Description
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
cups 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
cups是cups开源的一个类 Unix 操作系统的组合式印刷系统。 OpenPrinting CUPS 2.4.2及之前版本存在安全漏洞，该漏洞源于存在堆缓冲区溢出漏洞，允许远程攻击者发起拒绝服务(DoS)攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| OpenPrinting | cups | <= 2.4.2 | - |
|
II. Public POCs for CVE-2023-32324
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-32324
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-32324 (1)
-
https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7 x_refsource_CONFIRM
Mailing List Discussions for CVE-2023-32324 (1)
IV. Related Vulnerabilities
Same product: cups
-
CVE-2026-41079
OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-le -
CVE-2026-39316
CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` -
CVE-2026-39314
CUPS has an integer underflow in `_ppdCreateFromIPP` causes -
CVE-2026-34980
OpenPrinting CUPS: Shared PostScript queue lets anonymous Pr -
CVE-2026-34979
OpenPrinting CUPS: Heap overflow in `get_options()`
Same vendor: OpenPrinting
-
CVE-2026-41079
OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-le -
CVE-2026-39316
CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` -
CVE-2026-39314
CUPS has an integer underflow in `_ppdCreateFromIPP` causes -
CVE-2026-34980
OpenPrinting CUPS: Shared PostScript queue lets anonymous Pr -
CVE-2026-34979
OpenPrinting CUPS: Heap overflow in `get_options()`
Same weakness: CWE-122
-
CVE-2026-103631
Chrome <154.0.8037.97 WebRTC堆溢出漏洞 -
CVE-2026-91135
Apache Thrift: C++ `THeaderTransport::transform()` heap buff -
CVE-2026-14316
Heap buffer overflow in boks_sshd revoked-key error handling -
CVE-2026-101283
iperf3 3.20-3.21 RSA解密堆溢出漏洞 -
CVE-2026-103242
Rpm: heap-based buffer overflow write in hex2binv() via a mi
V. Comments for CVE-2023-32324
No comments yet