Lucene search

K
osvGoogleOSV:SUSE-SU-2024:2003-2
HistoryJun 12, 2024 - 5:30 a.m.

Security update for cups

2024-06-1205:30:57
Google
osv.dev
cups
security update
bug fix
file permissions
authentication

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

Low

This update for cups fixes the following issues:

  • CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. (bsc#1225365)
  • Handle local ‘Negotiate’ authentication response for cli clients (bsc#1223179)

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

Low