Lucene search

K
redosRedosROS-20240729-08
HistoryJul 29, 2024 - 12:00 a.m.

ROS-20240729-08

2024-07-2900:00:00
redos.red-soft.ru
5
vulnerability
libppd
buffer overflow
memory
privilege escalation
arbitrary code execution
unix

CVSS3

7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

43.1%

A vulnerability in the scan_ps() function of the libppd library of the CUPS print server is related to the operation exceeding the boundaries of the
buffer in memory when processing the length of PPD files. Exploitation of the vulnerability could allow an attacker to
elevate his privileges and execute arbitrary code

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64cups< 2.4.7-2UNKNOWN

CVSS3

7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

43.1%