Lucene search

K
rosalinuxROSA LABROSA-SA-2024-2427
HistoryJun 03, 2024 - 8:12 a.m.

Advisory ROSA-SA-2024-2427

2024-06-0308:12:51
ROSA LAB
abf.rosalinux.ru
cups
rosa-chrome
denial of service
resolved
update

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.7%

software: cups 2.3.3op2
OS: ROSA-CHROME

package_evr_string: cups-2.3.3op2-10

CVE-ID: CVE-2023-32324
BDU-ID: 2023-03873
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the format_log_line() function of the CUPS print server is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service
CVE-STATUS: Resolved
CVE-REV: To close, run the command: sudo dnf update cups

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchcups< 2.3.3UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.7%