CVE-2020-3898

NameCVE-2020-3898
Descriptionheap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-2237-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cups (PTS)stretch2.2.1-8+deb9u6fixed
stretch (security)2.2.1-8+deb9u2vulnerable
buster2.2.10-6+deb10u3fixed
bullseye, sid2.3.3-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cupssourcejessie1.7.5-11+deb8u8DLA-2237-1
cupssourcestretch2.2.1-8+deb9u6
cupssourcebuster2.2.10-6+deb10u3
cupssource(unstable)2.3.1-12

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=1823964
https://src.fedoraproject.org/rpms/cups/blob/c1920d09b842bd2d0611559d00d595abd8aa2424/f/cups-ppdopen-heap-overflow.patch
https://github.com/apple/cups/commit/82e3ee0e3230287b76a76fb8f16b92ca6e50b444 (cups/ppd.c, ppdc/ppdc-source.cxx)

Search for package or bug name: Reporting problems