CVE-2023-34095

2023-06-1417:15:09

CWE-121

GitHub_M

web.nvd.nist.gov

cpdb-libs

buffer overflow

scanf

fscanf

cve-2023-34095

security patch

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.006

Percentile

79.5%

JSON

cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.0 through 2.0b4, cpdb-libs is vulnerable to buffer overflows via improper use of scanf(3). cpdb-libs uses the fscanf() and scanf() functions to parse command lines and configuration files, dropping the read string components into fixed-length buffers, but does not limit the length of the strings to be read by fscanf() and scanf() causing buffer overflows when a string is longer than 1023 characters. A patch for this issue is available at commit f181bd1f14757c2ae0f17cc76dc20421a40f30b7. As all buffers have a length of 1024 characters, the patch limits the maximum string length to be read to 1023 by replacing all occurrences of %s with %1023s in all calls of the fscanf() and scanf() functions.

Affected configurations

Nvd

Vulners

Node

openprintingcpdb-libsRange1.0–2.0

openprintingcpdb-libsMatch2.0beta1

openprintingcpdb-libsMatch2.0beta2

openprintingcpdb-libsMatch2.0beta3

openprintingcpdb-libsMatch2.0beta4

VendorProductVersionCPE
openprintingcpdb-libs*cpe:2.3:a:openprinting:cpdb-libs:*:*:*:*:*:*:*:*
openprintingcpdb-libs2.0cpe:2.3:a:openprinting:cpdb-libs:2.0:beta1:*:*:*:*:*:*
openprintingcpdb-libs2.0cpe:2.3:a:openprinting:cpdb-libs:2.0:beta2:*:*:*:*:*:*
openprintingcpdb-libs2.0cpe:2.3:a:openprinting:cpdb-libs:2.0:beta3:*:*:*:*:*:*
openprintingcpdb-libs2.0cpe:2.3:a:openprinting:cpdb-libs:2.0:beta4:*:*:*:*:*:*

Vendor	Product	Version	CPE
openprinting	cpdb-libs	*	cpe:2.3:a:openprinting:cpdb-libs::::::::
openprinting	cpdb-libs	2.0	cpe:2.3:a:openprinting:cpdb-libs:2.0:beta1::::::
openprinting	cpdb-libs	2.0	cpe:2.3:a:openprinting:cpdb-libs:2.0:beta2::::::
openprinting	cpdb-libs	2.0	cpe:2.3:a:openprinting:cpdb-libs:2.0:beta3::::::
openprinting	cpdb-libs	2.0	cpe:2.3:a:openprinting:cpdb-libs:2.0:beta4::::::

CNA Affected

[
  {
    "vendor": "OpenPrinting",
    "product": "cpdb-libs",
    "versions": [
      {
        "version": ">= 1.0, <= 2.0b4",
        "status": "affected"
      }
    ]
  }
]