cups: Local privilege escalation to root due to insecure environment variable handling

It was discovered that CUPS allows non-root users to pass environment variables to CUPS backends. Affected backends use attacker-controlled environment variables without proper sanitization. A local attacker, who is part of one of the groups specified in the SystemGroups directive, could use the...

CUPS Printing Server Auth Bypass Privilege Escalation

The vulnerability of the CUPS printing server is related to the SetEnv and PassEnv directives. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

CVE-2018-4180

It was discovered that CUPS allows non-root users to pass environment variables to CUPS backends. Affected backends use attacker-controlled environment variables without proper sanitization. A local attacker, who is part of one of the groups specified in the SystemGroups directive, could use the...

PT-2018-2732

Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13.5 Description The issue existed in the CUPS component of macOS High Sierra and was related to the SetEnv and PassEnv directives. It allowed an attacker to execute arbitrary code with root privileges. T...