{"id":"CVE-2023-4504","state":"PUBLISHED","title":"OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow","description":"Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.","publishedAt":"2023-09-21T22:47:41.879Z","updatedAt":"2025-11-04T16:10:38.138Z","severity":{"score":7,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"AHA","products":["OpenPrinting CUPS","OpenPrinting libppd"],"affected":[{"vendor":"OpenPrinting","product":"CUPS","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.4.6","versionType":"semver"}]},{"vendor":"OpenPrinting","product":"libppd","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"d09348b","versionType":"git"}]}],"references":["https://takeonme.org/cves/CVE-2023-4504.html","https://github.com/OpenPrinting/libppd/security/advisories/GHSA-4f65-6ph5-qwh6","https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h","https://github.com/OpenPrinting/cups/releases/tag/v2.4.7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AMYDKIE4PSJDEMC5OWNFCDMHFGLJ57XG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WVS4I7JG3LISFPKTM6ADKJXXEPEEWBQ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WHEJIYMMAIXU2EC35MGTB5LGGO2FFJE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T2GSPQAFK2Z6L57TRXEKZDF42K2EVBH7/","https://lists.debian.org/debian-lts-announce/2023/09/msg00041.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXPVADB56NMLJWG4IZ3OZBNJ2ZOLPQJ6/","http://seclists.org/fulldisclosure/2024/Sep/33"],"weaknesses":["CWE-122"],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/4xxx/CVE-2023-4504.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-4504","state":"PUBLISHED","datePublished":"2023-09-21T22:47:41.879Z","dateUpdated":"2025-11-04T16:10:38.138Z","assignerShortName":"AHA","assignerOrgId":"26969f82-7e87-44d8-9cb5-f6fb926ddd43","dateReserved":"2023-08-23T21:14:04.183Z"},"containers":{"cna":{"title":"OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow","descriptions":[{"lang":"en","value":"Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023."}],"affected":[{"vendor":"OpenPrinting","product":"CUPS","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.4.6","versionType":"semver"}]},{"vendor":"OpenPrinting","product":"libppd","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"d09348b","versionType":"git"}]}],"references":[{"url":"https://takeonme.org/cves/CVE-2023-4504.html","tags":["technical-description","third-party-advisory"]},{"url":"https://github.com/OpenPrinting/libppd/security/advisories/GHSA-4f65-6ph5-qwh6","tags":["vendor-advisory"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h","tags":["vendor-advisory"]},{"url":"https://github.com/OpenPrinting/cups/releases/tag/v2.4.7","tags":["release-notes"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AMYDKIE4PSJDEMC5OWNFCDMHFGLJ57XG/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WVS4I7JG3LISFPKTM6ADKJXXEPEEWBQ/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WHEJIYMMAIXU2EC35MGTB5LGGO2FFJE/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T2GSPQAFK2Z6L57TRXEKZDF42K2EVBH7/"},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00041.html"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXPVADB56NMLJWG4IZ3OZBNJ2ZOLPQJ6/"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"AHA","orgId":"26969f82-7e87-44d8-9cb5-f6fb926ddd43","dateUpdated":"2023-10-07T02:06:38.717Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"zenofex"},{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"WanderingGlitch"},{"lang":"en","type":"coordinator","user":"00000000-0000-4000-9000-000000000000","value":"Austin Hackers Anonymous!"}],"datePublic":"2023-09-20T12:35:00.000Z","source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://takeonme.org/cves/CVE-2023-4504.html","tags":["technical-description","third-party-advisory","x_transferred"]},{"url":"https://github.com/OpenPrinting/libppd/security/advisories/GHSA-4f65-6ph5-qwh6","tags":["vendor-advisory","x_transferred"]},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h","tags":["vendor-advisory","x_transferred"]},{"url":"https://github.com/OpenPrinting/cups/releases/tag/v2.4.7","tags":["release-notes","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AMYDKIE4PSJDEMC5OWNFCDMHFGLJ57XG/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WVS4I7JG3LISFPKTM6ADKJXXEPEEWBQ/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WHEJIYMMAIXU2EC35MGTB5LGGO2FFJE/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T2GSPQAFK2Z6L57TRXEKZDF42K2EVBH7/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00041.html","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXPVADB56NMLJWG4IZ3OZBNJ2ZOLPQJ6/","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Sep/33"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-04T16:10:38.138Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-04-23T13:29:05.900883Z","id":"CVE-2023-4504","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-23T16:16:13.304Z"}}]}}}