Overview
- Description
- cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.0 through 2.0b4, cpdb-libs is vulnerable to buffer overflows via improper use of `scanf(3)`. cpdb-libs uses the `fscanf()` and `scanf()` functions to parse command lines and configuration files, dropping the read string components into fixed-length buffers, but does not limit the length of the strings to be read by `fscanf()` and `scanf()` causing buffer overflows when a string is longer than 1023 characters. A patch for this issue is available at commit f181bd1f14757c2ae0f17cc76dc20421a40f30b7. As all buffers have a length of 1024 characters, the patch limits the maximum string length to be read to 1023 by replacing all occurrences of `%s` with `%1023s` in all calls of the `fscanf()` and `scanf()` functions.
- Source
- security-advisories@github.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
Weaknesses
- security-advisories@github.com
- CWE-121
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openprinting:cpdb-libs:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57F84EB4-6BF2-4AAA-9BC6-F881F046A97B",
"versionEndExcluding": "2.0",
"versionStartIncluding": "1.0"
},
{
"criteria": "cpe:2.3:a:openprinting:cpdb-libs:2.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "367C92BD-4CA9-4024-B9FA-7430236C9F6F"
},
{
"criteria": "cpe:2.3:a:openprinting:cpdb-libs:2.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CED72D06-A6D2-486F-B3FA-6ADA82262C6B"
},
{
"criteria": "cpe:2.3:a:openprinting:cpdb-libs:2.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8545935C-24E9-49F6-8EBE-4D49F2C72F81"
},
{
"criteria": "cpe:2.3:a:openprinting:cpdb-libs:2.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7330E46-2ACD-4832-89F9-D0372C9BFF06"
}
],
"operator": "OR"
}
]
}
]