71 matches found
RHEL 7 : cups,_libppd (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cups, libppd: Postscript Parsing Heap Overflow CVE-2023-4504 Note that Nessus has not tested for this issue but has...
RHEL 6 : cups,_libppd (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cups, libppd: Postscript Parsing Heap Overflow CVE-2023-4504 Note that Nessus has not tested for this issue but has...
OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
...
Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2024-1135)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.0 : cups (EulerOS-SA-2024-1004)
According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to ...
EulerOS 2.0 SP11 : cups (EulerOS-SA-2023-3238)
According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based...
Fedora 39 : libppd (2023-52aa3d1a4f)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-52aa3d1a4f advisory. CVE-2023-4504 libppd: Postscript Parsing Heap Overflow Tenable has extracted the preceding description block directly from the Fedora security...
The vulnerability of the scan_ps() function in the libppd library of the CUPS printing server allows a attacker to escalate their privileges and execute arbitrary code.
The vulnerability of the scanps function in the libppd library of the CUPS printing server is related to the issue where the operation’s output goes out of the buffer in memory when processing PPD file lengths. Exploiting this vulnerability can allow an attacker to increase their privileges and...
Amazon Linux 2023 : cups, cups-client, cups-devel (ALAS2023-2023-361)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-361 advisory. A vulnerability was found in OpenPrinting CUPS. The security flaw occurs due to failure in validating the length provided by an attacker-crafted CUPS document, possibly leading to a heap-based buffer...
Fedora: Security Advisory for libppd (FEDORA-2023-52aa3d1a4f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: libppd-2.0~rc2-4.fc39
Libppd provides all PPD related function/API which is going to be removed from CUPS 3.X, but are still required for retro-fitting support of legacy printers. The library is meant only for retro-fitting printer applications, any new printer drivers have to be written as native printer application...
Fedora: Security Advisory for libppd (FEDORA-2023-00484b4120)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: libppd-2.0~rc2-4.fc38
Libppd provides all PPD related function/API which is going to be removed from CUPS 3.X, but are still required for retro-fitting support of legacy printers. The library is meant only for retro-fitting printer applications, any new printer drivers have to be written as native printer application...
Fedora 38 : cups (2023-96519dc6fd)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-96519dc6fd advisory. 2239982 - cups-2.4.7 is available Security fix for CVE-2023-4504 2233078 - cupsd spamming journal Tenable has extracted the preceding description...
Fedora 38 : libppd (2023-00484b4120)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-00484b4120 advisory. CVE-2023-4504 libppd: Postscript Parsing Heap Overflow Tenable has extracted the preceding description block directly from the Fedora security...
CUPS < 2.4.7 Buffer Overflow Vulnerability
CUPS is prone to a heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openprinting:cups"; ...
CVE-2023-4504
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023...
AZL-37100 CVE-2023-4504 affecting package cups for versions less than 2.4.10-1
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023...
ALPINE-CVE-2023-4504
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023...
CVE-2023-4504
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023...