CVE-2020-4060

LoRa Basics Station CVE-2020-4060: A Use-After-Free in cups_update_info affects versions prior to 2.0.4 on 32-bit platforms. If the CUPS server responds with a signature length > 2 GB (or sets a length field > 2^31-1 while not containing that much data), the code path frees memory and then ...

CVE-2020-4060

In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...

CVE-2020-4060 Use After Free in in cups_update_info in LoRa Basics Station

In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...

CVE-2020-4060: Use After Free

In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...

PT-2020-3137

Name of the Vulnerable Software and Affected Versions LoRa Basics Station versions prior to 2.0.4 Description The issue is related to a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message where the...

MGASA-2020-0248 Updated cups packages fix security vulnerability

Updated cups packages fix security vulnerabilities: It was discovered that CUPS incorrectly handled certain language values. A local attacker could possibly use this issue to cause CUPS to crash, leading to a denial of service, or possibly obtain sensitive information CVE-2019-2228. Stephan...

Updated cups packages fix security vulnerability

Updated cups packages fix security vulnerabilities: It was discovered that CUPS incorrectly handled certain language values. A local attacker could possibly use this issue to cause CUPS to crash, leading to a denial of service, or possibly obtain sensitive information CVE-2019-2228. Stephan...

Debian DLA-2237-1 : cups security update

The following CVEs were reported against src:cups. CVE-2019-8842 The ippReadIO function may under-read an extension field. CVE-2020-3898 There was a heap based buffer overflow in libcups's ppdFindOption in ppd-mark.c. The ppdOpen function did not handle invalid UI constraint...

Debian: Security Advisory (DLA-2237-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2237-1] cups security update

Package : cups Version : 1.7.5-11+deb8u8 CVE ID : CVE-2019-8842 CVE-2020-3898 The following CVEs were reported against src:cups. CVE-2019-8842 The ippReadIO function may under-read an extension field. CVE-2020-3898 There was a heap based buffer overflow in libcupss ppdFindOption in ppd-mark.c. Th...

PT-2020-6187

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.2 Security Update 2019-002 Mojave versions prior to the update Security Update 2019-007 High Sierra versions prior to the update Description A buffer overflow issue was addressed with improved bounds checking, whi...

DLA-2237-1 cups - security update

Bulletin has no description...

Fedora 30 : 1:cups (2020-5a4da65166)

Security fix for CVE-2020-3898 ---- 1822154 - cups.service doesn't execute automatically on request Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

Fedora: Security Advisory for cups (FEDORA-2020-5a4da65166)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: cups-2.2.12-8.fc30

CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple In c. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

cups security and bug fix update

1:2.2.6-33 - fix more memory leaks found by coverity in 1775668 1:2.2.6-32 - fix covscan issues raised by 1775668 1:2.2.6-31 - 1775668 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created 1:2.2.6-30 - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory...

Fedora: Security Advisory for cups (FEDORA-2020-67c84f3f49)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2020-1531)

According to the versions of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as use...

[SECURITY] Fedora 31 Update: cups-2.2.12-8.fc31

CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple In c. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Fedora 31 : 1:cups (2020-67c84f3f49)

Security fix for CVE-2020-3898 ---- 1822154 - cups.service doesn't execute automatically on request Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...