6.8

CVE-2024-45062

Exploit
A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. A specially configured printer that supports IPP-over-USB can cause a buffer overflow which can lead to a arbitrary code execution in a privileged service. To trigger the vulnerability, a malicious device would need to be connected to the vulnerable system over USB.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openprinting ≫ Ippusbxd Firmware Version 1.34
   Openprinting ≫ Ippusbxd Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.277
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Cisco Talos 6.4 0.5 5.9
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2071
Third Party Advisory
Exploit
Mitigation
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2071