Fedora 26 : cups-filters / qpdf (2017-191d7ec089)

Adding patches for CVEs in qpdf does binary incompatibility, so cups-filters needed to be rebuilt. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora Update for cups-filters FEDORA-2017-191d7ec089

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: cups-filters-1.13.4-3.fc26

Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrintin...

Updated qpdf packages fix security vulnerabilities

This snapshot of the upstream development branch 6.0 of qpdf fixes several infinite loop vulnerabilities: CVE-2017-9208, CVE-2017-9209, CVE-2017-9210, CVE-2017-11624, CVE-2017-11625, CVE-2017-11626, CVE-2017-11627. For Mageia 5, the cups-filters package was also rebuilt against this new major...

Apple Mac OS X Multiple Vulnerabilities-02 (Apr 2017)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2018-1823

Name of the Vulnerable Software and Affected Versions: CUPS versions prior to 2.2.2 Description: The issue allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding, potentially disrupting data integrity. This is due to...

CUPS 2.0.3 - Remote Command Execution Exploit

Exploit for linux platform in category remote exploits !/usr/bin/python Exploit Title: CUPS Reference Count Over Decrement Remote Code Execution Google Dork: n/a Date: 2/2/17 Exploit Author: @0x00string Vendor Homepage: cups.org Software Link:...

CUPS Remote Code Execution

!/usr/bin/python Exploit Title: CUPS Reference Count Over Decrement Remote Code Execution Google Dork: n/a Date: 2/2/17 Exploit Author: @0x00string Vendor Homepage: cups.org Software Link: https://github.com/apple/cups/releases/tag/release-2.0.2 Version: \n" " -h, --help: Show this message\n" " -...

CUPS 2.0.3 - Remote Command Execution

CUPS 2.0.3 - Remote Command Execution !/usr/bin/python Exploit Title: CUPS Reference Count Over Decrement Remote Code Execution Google Dork: n/a Date: 2/2/17 Exploit Author: @0x00string Vendor Homepage: cups.org Software Link: https://github.com/apple/cups/releases/tag/release-2.0.2 Version: 2.0....

CUPS < 2.0.3 - Remote Command Execution

!/usr/bin/python Exploit Title: CUPS Reference Count Over Decrement Remote Code Execution Google Dork: n/a Date: 2/2/17 Exploit Author: @0x00string Vendor Homepage: cups.org Software Link: https://github.com/apple/cups/releases/tag/release-2.0.2 Version: 2.0.3 Tested on: Ubuntu 14/15 CVE :...

[SECURITY] Fedora 24 Update: boomaga-0.8.0-6.git97f52c1.fc24

Boomaga BOOklet MAnager is a virtual printer for viewing a document before printing it out using the physical printer. The program is very simple to work with. Running any program, click "print" and select "Boomaga" to see in several seconds CUPS takes some time to respond the Boomaga window open...

SOL52950150 - CUPS vulnerability CVE-2014-9679

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

GLSA-201607-06 : CUPS: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201607-06 CUPS: Buffer overflow A vulnerability has been discovered in CUPS concerning the handling of compressed raster files. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process...

CUPS: Buffer overflow

Background CUPS, the Common Unix Printing System, is a full-featured print server. Description A vulnerability has been discovered in CUPS concerning the handling of compressed raster files. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process...

Debian GNU/Linux Data Compromise

The kdelibs3-cups package on the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Remote Compromise

The multiple vulnerabilities in the cups-pk-helper package of the Debian GNU/Linux operating system may lead to breaches of confidentiality and integrity of protected information. These vulnerabilities can be exploited remotely...

CUPS cgiPutts XSS

The vulnerability in the cgiPutts function cgi-bin/template.c of the CUPS printing server is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker to inject arbitrary JavaScript or HTML code into the web pages generated by the system throug...

CUPS Printing Server Code Execution

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS printing server is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the device configuration file remotely or execute arbitrary code using specially crafted...

Wireshark Network Protocol Analyzer Compromise

The vulnerability in the getquotedstring and getunquotedstring functions in the CUPS dissector epan/dissectors/packet-cups.c in Wireshark allows malicious actors operating remotely to trigger a service failure—i.e., reading beyond the buffer and an emergency termination of the application—by usin...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the cups package of the Debian GNU/Linux operating system may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...