Skip to content
OpenAdvisories
High USN-6391-2 1 CVE

cups vulnerability

Published Sep 21, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-6391-1 fixed a vulnerability in CUPS. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that CUPS incorrectly parsed certain Postscript objects.
If a user or automated system were tricked into printing a specially
crafted document, a remote attacker could use this issue to cause CUPS to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS cups 2.1.3-4ubuntu0.11+esm4
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS cups 2.2.7-1ubuntu2.10+esm2

Vulnerabilities 1

  • High 7.0
    CVE-2023-4504 Public exploit

    OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

    Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in Septembe…

    OpenPrinting cups libppd cups Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2023-4504