CVE-2017-18248

概要

参考情報

• apple/cups commit 49fa498 · Patch
• apple/cups · Exploit
• apple/cups release v2.2.6 · Third Party Advisory
• lists.debian.org/debian-lts-announce/2018/05/msg00018.html
• lists.debian.org/debian-lts-announce/2018/07/msg00003.html
• security.cucumberlinux.com/security/details.php · Exploit
• usn.ubuntu.com/3713-1

cups のその他の脆弱性

• CVE-2022-26691中 6.7A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, m…
• CVE-2012-6094緊急 9.8cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system
• CVE-2018-4300中 5.9The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interfac…
• CVE-2017-18190高 7.5A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitr…
• CVE-2014-9679中 6.8Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified i…