PT-2023-24668 · Cpdb-Libs+2 · Cpdb-Libs+2

Peter + 1 · Published 2023-06-14 · Updated 2023-07-05 · CVE-2023-34095

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cpdb-libs versions 1.0 through 2.0b4

Description The issue arises from the improper use of scanf(3) in cpdb-libs, leading to buffer overflows. This occurs because fscanf() and scanf() functions are used to parse command lines and configuration files without limiting the length of the strings to be read, causing buffer overflows when a string exceeds 1023 characters. The fscanf() and scanf() functions drop the read string components into fixed-length buffers. A patch is available, which limits the maximum string length to 1023 by replacing %s with %1023s in all calls of fscanf() and scanf() functions.

Recommendations For versions 1.0 through 2.0b4, apply the patch available at commit f181bd1f14757c2ae0f17cc76dc20421a40f30b7, which replaces all occurrences of %s with %1023s in all calls of the fscanf() and scanf() functions to limit the maximum string length to 1023.

Exploit

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

CVE-2023-34095

GHSA-25J7-9GFC-F46X

USN-6204-1

Affected Products

Linuxmint

Ubuntu

Cpdb-Libs

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34095.json · Exploit
• 🔥 https://github.com/OpenPrinting/cpdb-libs/security/advisories/GHSA-25j7-9gfc-f46x · Exploit
• 🔥 http://openwall.com/lists/oss-security/2023/06/14/7 · Exploit
• https://github.com/OpenPrinting/cpdb-libs/commit/f181bd1f14757c2ae0f17cc76dc20421a40f30b7 · Patch
• https://ubuntu.com/security/notices/USN-6204-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-34095 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-34095 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-34095 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-34095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34095 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-34095 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6204-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-34095 · Security Note
• https://github.com/OpenPrinting/cpdb-libs/blob/85555fba64d34f53a2fce099b0488904cc48ed35/tools/cpdb-text-frontend.c#L453 · Note
• https://github.com/OpenPrinting/cpdb-libs/blob/85555fba64d34f53a2fce099b0488904cc48ed35/tools/cpdb-text-frontend.c#L362 · Note