Lucene search

K
redosRedosROS-20240806-19
HistoryAug 06, 2024 - 12:00 a.m.

ROS-20240806-19

2024-08-0600:00:00
redos.red-soft.ru
6
cups
print server
vulnerability
symbolic links
sensitive data
exploitation
attacker

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

The CUPS print server vulnerability is related to incorrectly defining symbolic links before accessing a
file. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data by
running a cupsd server with the Listen configuration element

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64cups< 2.4.7-3UNKNOWN

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low