Skip to content
OpenAdvisories
High USN-6391-1 1 CVE

cups vulnerability

Published Sep 20, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that CUPS incorrectly parsed certain Postscript objects.
If a user or automated system were tricked into printing a specially
crafted document, a remote attacker could use this issue to cause CUPS to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS cups 2.3.1-9ubuntu1.6
Ubuntu · 22.04 LTS 22.04:LTS cups 2.4.1op1-1ubuntu4.7

Vulnerabilities 1

  • High 7.0
    CVE-2023-4504 Public exploit

    OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

    Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in Septembe…

    OpenPrinting cups libppd cups Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2023-4504