CVE-2023-34095
CWE-121Published: June 14, 2023· Updated: Jun 17, 2026
Official Description
cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.0 through 2.0b4, cpdb-libs is vulnerable to buffer overflows via improper use of `scanf(3)`. cpdb-libs uses the `fscanf()` and `scanf()` functions to parse command lines and configuration files, dropping the read string components into fixed-length buffers, but does not limit the length of the strings to be read by `fscanf()` and `scanf()` causing buffer overflows when a string is longer than 1023 characters. A patch for this issue is available at commit f181bd1f14757c2ae0f17cc76dc20421a40f30b7. As all buffers have a length of 1024 characters, the patch limits the maximum string length to be read to 1023 by replacing all occurrences of `%s` with `%1023s` in all calls of the `fscanf()` and `scanf()` functions.
Risk Analysis
The cpdb-libs library is vulnerable to buffer overflows due to improper use of scanf functions, which do not limit input length. This critical flaw could lead to arbitrary code execution when processing configuration files.
No public exploit is known, and it is not in the CISA KEV. The vulnerability is remotely exploitable with low complexity.
Update to a version of cpdb-libs that includes the patch limiting string length to 1023 characters.
Technical Analysis
CVE-2023-34095 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.
The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.
A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.
CVSS v3.1 Vector Breakdown
Affected Vendors & Products
Exploit & PoC Resources
Official Patches & Advisories
All References (12)
Quick Facts
Related CVEs (CWE-121)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2023-34095 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts