CVE-2023-32324: high-severity vulnerability in OpenPrinting cups
OpenPrinting CUPS vulnerable to heap buffer overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 1.5%
In short
OpenPrinting CUPS has a memory overflow bug in its logging function that can crash the print server when debug logging is enabled. An attacker can remotely trigger this crash, disrupting printing services.
Technical detail
A heap buffer overflow in the `format_log_line` function allows remote attackers to cause denial of service when `loglevel` is set to `DEBUG` in `cupsd.conf`. The vulnerability affects CUPS versions 2.4.2 and prior; exploitation requires the debug logging configuration to be active.
Summary generated and translated by AI from the official description.
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
OpenPrinting · cupsRelated CVEs — OpenPrinting cups
In the same product, most dangerous first.
CVE-2024-35235MEDIUMCupsd Listen arbitrary chmod 0140777EPSS 2.4%CVE-2026-34980MEDIUMOpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the networkEPSS 1.7%CVE-2023-34241MEDIUMCUPS vulnerable to use-after-free in cupsdAcceptClient()EPSS 1.4%CVE-2025-58364MEDIUMcups: Remote DoS via null dereferenceEPSS 1.1%CVE-2025-58060HIGHcups has Authentication bypass with AuthType NegotiateEPSS 1.0%CVE-2025-61915MEDIUMOpenPrinting CUPS vulnerable to stack based out-of-bound writeEPSS 0.5%