CVE-2019-13165: Buffer Overflow
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-13165?
CVE-2019-13165 is a buffer overflow vulnerability in the request parser of the IPP service of certain Xerox printers (such as the Phaser 3320 V53.006.16.000), which could allow an unauthenticated attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code on the device.
Which Xerox printers are affected by CVE-2019-13165?
Xerox Phaser 3320 printers with firmware version v53.006.16.000 are affected by CVE-2019-13165.
What is the severity of CVE-2019-13165?
CVE-2019-13165 has a severity rating of 9.8 which is considered critical.
How can an attacker exploit CVE-2019-13165?
An unauthenticated attacker can exploit CVE-2019-13165 by sending specially crafted requests to the IPP service, triggering a buffer overflow and potentially executing arbitrary code.
Is there a fix available for CVE-2019-13165?
Yes, Xerox has released firmware updates to address the buffer overflow vulnerability in the affected printers. Please refer to the official Xerox website for the latest firmware updates.