Lucene search

K
oraclelinuxOracleLinuxELSA-2020-3864
HistoryOct 06, 2020 - 12:00 a.m.

cups security and bug fix update

2020-10-0600:00:00
linux.oracle.com
22

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

[1:1.6.3-51]

  • 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]
    [1:1.6.3-50]
  • 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var
    [1:1.6.3-49]
  • more covscan issues raised from the fix 1672212
    [1:1.6.3-48]
  • fixing covscan issue from 1672212
    [1:1.6.3-47]
  • 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created
    [1:1.6.3-46]
  • 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue
    [1:1.6.3-45]
  • fixing covscan issue from 1774460
    [1:1.6.3-44]
  • 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcupss asn1_get_packed function [rhel-7]
  • 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcupss asn1_get_type function [rhel-7]
  • 1753809 - Settings in ~/.cups/client.conf arent used

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P