MGASA-2023-0284
- Source
- https://advisories.mageia.org/MGASA-2023-0284.html
- Import Source
- https://advisories.mageia.org/MGASA-2023-0284.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2023-0284
- Related
- Published
- 2023-10-10T17:21:41Z
- Modified
- 2023-10-10T15:55:49Z
- Summary
- Updated cups packages fix security vulnerabilities
- Details
-
The updated packages fix security vulnerabilities:
It was discovered that CUPS incorrectly authenticated certain remote requests. A remote attacker could possibly use this issue to obtain recently printed documents. (CVE-2023-32360)
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. (CVE-2023-4504)
- References
-
- https://advisories.mageia.org/MGASA-2023-0284.html
- https://bugs.mageia.org/show_bug.cgi?id=32281
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32360
- https://ubuntu.com/security/notices/USN-6361-1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4504
- https://ubuntu.com/security/notices/USN-6391-1
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:9 / cups
Package
- Name
- cups
- Purl
- pkg:rpm/mageia/cups?distro=mageia-9
Mageia:8 / cups
Package
- Name
- cups
- Purl
- pkg:rpm/mageia/cups?distro=mageia-8