Advisory ROSA-SA-2024-2377

🗓️ 19 Mar 2024 12:44:17Reported by ROSA LABType

Advisory for CUPS version 2.3.3op2 on ROSA-CHROME, addresses vulnerabilities related to authorization and memory usage impacting privilege escalation and denial of service. Fixes available through sudo dnf update cup

Reporter	Title	Published	Views	Family All 275
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Apple macOS Monterey and macOS Big Sur, IBM Cloud PAK for Watson AI Ops is vulnerable to attacks gaining elevated priviledges (CVE-2022-26691)	14 Sep 202215:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to elevated privileges in Apple macOS Monterey and macOS Big Sur. (CVE-2022-26691)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to elevated privileges due to CVE-2022-26691	4 Nov 202216:20	–	ibm
ATTACKERKB	CVE-2022-26691	26 May 202218:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : cups, cups-client, cups-devel (ALAS2022-2022-108)	7 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : cups, cups-client, cups-devel (ALAS2022-2022-203)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : cups, cups-client, cups-devel (ALAS2023-2023-073)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : cups, cups-client, cups-devel (ALAS2023-2023-235)	20 Jul 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : cups (ALAS-2023-2109)	20 Jul 202300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
ROSA	any	noarch	cups	2.3.3	UNKNOWN

19 Mar 2024 12:44Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.3 - 7.1

CVSS 27.2

EPSS0.01395

SSVC