MediumFix available
cups — security advisory
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.
- Products
- cups
- Affected versions
- 2.4.2-3, 2.4.2-3+deb12u1
- Fixed versions
- 2.4.2-3+deb12u2, 2.4.2-6
- CVEs
- CVE-2023-32360
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 15:54 UTC · Revision 1
Source evidence
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.
osv:DEBIAN-CVE-2023-32360
cups
Fixed versions: 2.4.2-3+deb12u2
cups
Fixed versions: 2.4.2-6
cups
Fixed versions: 2.4.2-6
Complete source record
{
"id": "721b0ae448c8400d4bbaa32f9853c10f45996f061b3851dea812eac18db1f3f9",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2023-32360",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2023-32360",
"summary": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.",
"evidence": "osv:DEBIAN-CVE-2023-32360",
"products": [
{
"name": {
"value": "cups",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.4.2-3+deb12u2",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "2.4.2-3",
"evidence": "/affected/0/versions"
},
{
"value": "2.4.2-3+deb12u1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "cups",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.4.2-6",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cups",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.4.2-6",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "DEBIAN-CVE-2023-32360",
"aliases": [
"DEBIAN-CVE-2023-32360"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.4.2-3+deb12u2"
}
]
}
],
"package": {
"name": "cups",
"purl": "pkg:deb/debian/cups?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"2.4.2-3",
"2.4.2-3+deb12u1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-32360.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.4.2-6"
}
]
}
],
"package": {
"name": "cups",
"purl": "pkg:deb/debian/cups?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-32360.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.4.2-6"
}
]
}
],
"package": {
"name": "cups",
"purl": "pkg:deb/debian/cups?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-32360.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-26T18:02:28.710343441Z",
"provider": "osv",
"upstream": [
"CVE-2023-32360"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2023-32360"
]
},
"related_cves": [
{
"value": "CVE-2023-32360",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 456029,
"published_at": "2023-06-23T18:15:11.647+00:00"
}