Openprinting · Openprinting Cups · CVE-2023-32324
**Name of the Vulnerable Software and Affected Versions**
OpenPrinting CUPS versions 2.4.2 and prior
**Description**
The issue is related to a heap buffer overflow vulnerability that could allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format log line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel` to `DEBUG`.
**Recommendations**
For OpenPrinting CUPS versions 2.4.2 and prior, as a temporary workaround, consider setting the `loglevel` in the `cupsd.conf` configuration file to a value other than `DEBUG` to minimize the risk of exploitation. Additionally, consider restricting access to the `format log line` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.