← voltar
CVE-2017-18248

CVE-2017-18248

EPSS 2.3%
The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3https://github.com/apple/cups/issues/5143https://github.com/apple/cups/releases/tag/v2.2.6https://lists.debian.org/debian-lts-announce/2018/05/msg00018.htmlhttps://lists.debian.org/debian-lts-announce/2018/07/msg00003.htmlhttps://security.cucumberlinux.com/security/details.php?id=346https://usn.ubuntu.com/3713-1/