March 28, 2023—KB5023778 (OS Build 22621.1485) Preview

None None...

CVE-2022-24673

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from...

March 28, 2023—KB5023774 (OS Build 22000.1761) Preview

None None...

CVE-2022-24674

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of...

CVE-2022-24674

CVE-2022-24674 affects Canon imageCLASS MF644Cdw 10.02 printers. A vulnerability in the privet API causes a stack-based buffer overflow due to improper validation of user-supplied data length, allowing network-adjacent attackers to execute code with root privileges without authentication. Several...

March 21, 2023—KB5023773 (OS Builds 19042.2788, 19044.2788, and 19045.2788) Preview

None None...

The vulnerability of the PCL6 Class Printer driver for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the PCL6 Class Printer driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

SUSE CVE-2008-0596

Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service memory consumption and daemon crash via a large number of requests to add and remove shared printers...

SUSE CVE-2011-2522

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

SUSE CVE-2014-4336

The generatelocalqueue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...

SUSE CVE-2015-2265

The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...

The vulnerability of the web service for Lexmark printer devices allows a perpetrator to execute arbitrary codes.

The vulnerability of the New Lexmark Device printers’ web service is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Vulnerabilities fixed in Lexmark Printers and Multifunctionals

Lexmark has fixed two vulnerabilities in the firmware of several printer and multifunction lines. A malicious party could exploit the vulnerabilities to grant himself elevated privileges granted on the vulnerable device, or to execute arbitrary code execute. The mitigation against brute-force log...

Lexmark 代码问题漏洞

Lexmark is a line of printers in the United States. A security vulnerability exists in Lexmark products version 2023-01-12 and prior versions that stems from a lack of input validation...

Lexmark 安全漏洞

Lexmark is a line of printers in the United States. A security vulnerability exists in Lexmark products version 2023-01-10 and prior versions, which stems from improper control of interaction frequency...

CVE-2023-24040

dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat an invoked external command during listing of the names of available printers. This allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This injection allows those users t...

Common Desktop Environment 注入漏洞

Common Desktop Environment is a Unix and OpenVMS desktop environment for individual developers based on the Motif widget toolkit. A security vulnerability exists in Common Desktop Environment version 1.6. An attacker can exploit this vulnerability to inject arbitrary printer names via the...

PT-2023-19374 · Oracle · Solaris 10

Name of the Vulnerable Software and Affected Versions: Common Desktop Environment version 1.6 Description: The issue is related to a bug in the parser of lpstat, an external command invoked by dtprintinfo, which occurs during the listing of available printer names. This bug allows low-privileged...

PT-2023-1216 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark products through 2023-01-12 Description: The issue is related to insufficient validation of requests on the server side of the New Lexmark Devices web service for Lexmark printers. This can allow a remote attacker to execute arbitrary...

PT-2022-27644 · Sharp · Sharp Digital Multifunctional System +1

Name of the Vulnerable Software and Affected Versions: SHARP Digital Full-color Multifunctional System versions 202 or earlier SHARP Digital Full-color Multifunctional System versions 120 or earlier SHARP Digital Full-color Multifunctional System versions 600 or earlier SHARP Digital Full-color...