Advisory ROSA-SA-2024-2320

software: cups 2.3.3op2
OS: ROSA-CHROME

package_evr_string: cups-2.3.3.3op2-6.src.rpm

CVE-ID: CVE-2023-4504
BDU-ID: 2023-06408
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the scan_ps() function of the CUPS print server libppd library is related to an operation exceeding buffer boundaries in memory when processing PPD file lengths. Exploitation of the vulnerability could allow an attacker to escalate privileges and execute arbitrary code
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cups