FreeBSD : CUPS -- multiple vulnerabilities (60e991ac-c013-11e9-b662-001cc0382b2f)

Apple reports : - CVE-2019-8696 and CVE-2019-8675: SNMP buffer overflows. - IPP buffer overflow. - Memory disclosure in the scheduler. - DoS issues in the scheduler. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

Ubuntu 16.04 LTS / 18.04 LTS : CUPS vulnerabilities (USN-4105-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4105-1 advisory. StephanZeisbergdiscovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issu...

GLSA-201908-08 : CUPS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-08 CUPS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

CUPS -- multiple vulnerabilities

Apple reports: CVE-2019-8696 and CVE-2019-8675: SNMP buffer overflows. IPP buffer overflow. Memory disclosure in the scheduler. DoS issues in the scheduler...

CUPS: Multiple vulnerabilities

Background CUPS, the Common Unix Printing System, is a full-featured print server. Description Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There i...

PT-2019-5321

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.6 Security Update versions prior to 2019-004 for High Sierra and Sierra Description A buffer overflow issue was addressed with improved memory handling. An attacker in a privileged network position may be able to...

PT-2019-5320

Name of the Vulnerable Software and Affected Versions CUPS versions prior to the version included in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra Description The issue is caused by a buffer overflow in the asn1 get packed function of the libcups...

samba security, bug fix, and enhancement update

4.9.1-6 - related: 1703204 - Fix printing with smbspool as CUPS backend 4.9.1-5 - resolves: 1703204 - Fix smbspool krb5 authentication 4.9.1-4 - resolves: 1690222 - Fix --max-protocol documentation of smbclient - resolves: 1518353 - Fix 'net ads join -Uadmin@forestdomain' - resolves: 1696524 - Fi...

ppdpo utility Buffer Overflow DoS

The vulnerability of the ppdpo utility in the cups-ppdc package is related to buffer overflow errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted script...

ppdhtml buffer overflow DoS

The vulnerability of the ppdhtml utility in the cups-ppdc package is related to buffer overflow errors 0x0000000000400c65. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted script...

About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra

About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra This document describes the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. About Apple security updates For o...

EulerOS Virtualization 3.0.1.0 : cups (EulerOS-SA-2019-1605)

According to the version of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web...

EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2019-1622)

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to...

EulerOS 2.0 SP3 : cups (EulerOS-SA-2019-1567)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - CUPS printing system provides a portable printing layer for UNIXAr operating systems. It has been developed by Apple Inc.to promote a standard...

EulerOS 2.0 SP2 : cups (EulerOS-SA-2019-1566)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - CUPS printing system provides a portable printing layer for UNIXAr operating systems. It has been developed by Apple Inc.to promote a standard...

EulerOS 2.0 SP5 : cups (EulerOS-SA-2019-1568)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - CUPS printing system provides a portable printing layer for UNIXAr operating systems. It has been developed by Apple Inc.to promote a standard...

[SECURITY] [DLA 1792-2] cups-filters regression update

Package : cups-filters Version : 1.0.61-5+deb8u4 Debian Bug : 926576 928936 928952 The update for ghostscript released as DLA-1792-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal "pdfdict" now hidden in the ghostscript update. Updated cups-filters packag...

Debian DLA-1792-2 : cups-filters regression update

The update for ghostscript released as DLA-1792-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal 'pdfdict' now hidden in the ghostscript update. Updated cups-filters packages are now available to correct this issue. For Debian 8 'Jessie', this problem has...

DLA-1792-2 cups-filters - regression update

Bulletin has no description...

CVE-2017-18190

A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS serve...