Read the docs
TI-2023-15618 Aliases CVE-2023-32324

OpenPrinting CUPS vulnerable to heap buffer overflow

Priority MEDIUM 42CWE-122Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 8 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-122 and the CVSS impact.

Summary

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01461 73rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 4 advisoriesRed Hat: 8 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenPrintingcupsup to 2.4.2—No fix listedCNA
  • cups VendorOpenPrinting Affected up to 2.4.2 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*up to 2.4.2VulnerableOpenPrinting
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
  • cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:* Versions up to 2.4.2 Vulnerable ·OpenPrinting
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian

Remediation

Red Hat 4 advisories

  • RHSA-2024:1409 Released 2024-03-19 · Red Hat rating Moderate
    cups security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) cups-1:2.2.6-51.el8_8.3, cups-client-1:2.2.6-51.el8_8.3, cups-devel-1:2.2.6-51.el8_8.3 +3
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) cups-1:2.2.6-51.el8_8.3, cups-libs-1:2.2.6-51.el8_8.3
  • RHSA-2024:1101 Released 2024-03-05 · Red Hat rating Moderate
    cups security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) cups-1:2.2.6-45.el8_6.4, cups-client-1:2.2.6-45.el8_6.4, cups-devel-1:2.2.6-45.el8_6.4 +3
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) cups-1:2.2.6-45.el8_6.4, cups-libs-1:2.2.6-45.el8_6.4
  • RHSA-2023:7165 Released 2023-11-14 · Red Hat rating Moderate
    cups security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 8) cups-1:2.2.6-54.el8_9, cups-client-1:2.2.6-54.el8_9, cups-devel-1:2.2.6-54.el8_9 +3
    • Red Hat Enterprise Linux BaseOS (v. 8) cups-1:2.2.6-54.el8_9, cups-libs-1:2.2.6-54.el8_9
Show 1 more Red Hat advisories
  • RHSA-2023:6596 Released 2023-11-07 · Red Hat rating Moderate
    cups security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) cups-1:2.3.3op2-21.el9, cups-client-1:2.3.3op2-21.el9, cups-devel-1:2.3.3op2-21.el9 +4
    • Red Hat Enterprise Linux BaseOS (v. 9) cups-1:2.3.3op2-21.el9, cups-libs-1:2.3.3op2-21.el9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:7165
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:6596
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:1101
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:1409
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2023:7165
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2023:6596
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:1101
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2024:1409

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-32324

References

Exploit 1

Advisory 1

  • TI-2025-35903 cups has Authentication bypass with AuthType Negotiate CVSS 3.1HIGH 8.0
  • TI-2023-17077 CUPS vulnerable to use-after-free in cupsdAcceptClient() CVSS 3.1HIGH 7.1
  • TI-2026-27200 Path traversal in OpenPrinting cups CVSS 3.1MEDIUM 6.5
  • TI-2023-04157 OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow CVSS 3.1HIGH 7.0
  • TI-2026-74874 Path traversal in OpenPrinting CUPS banner handling discloses files CVSS 3.1MEDIUM 5.3
  • TI-2026-27201 OpenPrinting CUPS: Heap overflow in `get_options()` CVSS 3.1MEDIUM 5.3
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences