diff options
| author | schitrod=cisco.com@lists.openembedded.org <schitrod=cisco.com@lists.openembedded.org> | 2023-06-13 04:04:39 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2023-06-13 22:11:26 +0100 |
| commit | c4b4a638ba27ca0ac0fdc272b3aa6505a19b6d85 (patch) | |
| tree | aeb4b490611aa04f5dae648c9a8f0bf266d5791f /meta-skeleton/recipes-skeleton | |
| parent | d70ff3f5a6d4a5b162277be5431a55caf8d966bc (diff) | |
| download | poky-c4b4a638ba27ca0ac0fdc272b3aa6505a19b6d85.tar.gz | |
cups: Fix CVE-2023-32324
OpenPrinting CUPS is an open source printing system. In versions 2.4.2
and prior, a heap buffer overflow vulnerability would allow a remote
attacker to launch a denial of service (DoS) attack. A buffer overflow
vulnerability in the function `format_log_line` could allow remote
attackers to cause a DoS on the affected system. Exploitation of the
vulnerability can be triggered when the configuration file `cupsd.conf`
sets the value of `loglevel `to `DEBUG`. No known patches or
workarounds exist at time of publication.
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-32324
https://security-tracker.debian.org/tracker/CVE-2023-32324
Upstream Patch:
https://github.com/OpenPrinting/cups/commit/fd8bc2d32589
(From OE-Core rev: a4bdbc82f7e5cc9a5cb603cb720f09b0216b0a0e)
Signed-off-by: Sanjay Chitroda <schitrod@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta-skeleton/recipes-skeleton')
0 files changed, 0 insertions, 0 deletions