Lucene search

K
mageiaGentoo FoundationMGASA-2015-0132
HistoryApr 04, 2015 - 1:45 p.m.

Updated cups-filters packages fix CVE-2015-2265

2015-04-0413:45:56
Gentoo Foundation
advisories.mageia.org
24

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.015

Percentile

87.0%

Updated cups-filters package fixes security vulnerability: cups-browsed in cups-filters before 1.0.66 contained a bug in the remove_bad_chars() function, where it failed to reliably filter out illegal characters if there were two or more subsequent illegal characters, allowing execution of arbitrary commands with the rights of the “lp” user, using forged print service announcements on DNS-SD servers (CVE-2015-2265).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchcups-filters< 1.0.53-1.1cups-filters-1.0.53-1.1.mga4

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.015

Percentile

87.0%