← back
CVE-2017-18248

CVE-2017-18248

EPSS 2.3%
The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3https://github.com/apple/cups/issues/5143https://github.com/apple/cups/releases/tag/v2.2.6https://lists.debian.org/debian-lts-announce/2018/05/msg00018.htmlhttps://lists.debian.org/debian-lts-announce/2018/07/msg00003.htmlhttps://security.cucumberlinux.com/security/details.php?id=346https://usn.ubuntu.com/3713-1/