CVE-2017-18190

概要

参考情報

• bugs.chromium.org/p/project-zero/issues/detail · Exploit
• apple/cups commit afa80cb · Patch
• lists.debian.org/debian-lts-announce/2018/02/msg00023.html · Mailing List
• lists.debian.org/debian-lts-announce/2018/07/msg00003.html · Mailing List
• usn.ubuntu.com/3577-1 · Third Party Advisory

cups のその他の脆弱性

• CVE-2022-26691中 6.7A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, m…
• CVE-2012-6094緊急 9.8cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system
• CVE-2018-4300中 5.9The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interfac…
• CVE-2017-18248中 5.3The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending p…
• CVE-2014-9679中 6.8Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified i…