Lucene search

K
gentooGentoo FoundationGLSA-201406-16
HistoryJun 16, 2014 - 12:00 a.m.

cups-filters: Multiple vulnerabilities

2014-06-1600:00:00
Gentoo Foundation
security.gentoo.org
9

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.114 Low

EPSS

Percentile

95.2%

Background

cups-filters is an OpenPrinting CUPS Filters.

Description

Multiple vulnerabilities have been discovered in cups-filters. Please review the CVE identifiers referenced below for more details about the vulnerabilities.

Impact

A remote attacker(s) could possibly execute arbitrary code utilizing multiple attack vectors, or a local attacker could gain escalated privileges via a specially crafted shared library.

Workaround

There is no known workaround at this time.

Resolution

All cups-filters users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-print/cups-filters-1.0.53"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-print/cups-filters<Β 1.0.53UNKNOWN

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.114 Low

EPSS

Percentile

95.2%