16 matches found
SUSE: Security Advisory (SUSE-SU-2024:3863-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:3863-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2024:3863-1 Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets bsc1231294 - CVE-2024-47076: Fixed lack of input sanitization in cfGetPrinterAttributes5 bsc1230937...
Medium: cups-filters
Issue Overview: CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDRANY:631, causing it to trust any packet from any source,...
SUSE SLES12: cups-filters / cups-filters-cups-browsed / etc (SUSE-SU-2024:3756-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3756-1 advisory. - CVE-2024-47850: Fixed cups-browsed can be abused to initiate remote DDoS against third-party targets bsc1231294 Tenable has extracted the preceding...
SUSE: Security Advisory (SUSE-SU-2024:3756-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for cups-filters
This update for cups-filters fixes the following issues: CVE-2024-47850: Fixed cups-browsed can be abused to initiate remote DDoS against third-party targets bsc1231294 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2024:3756-1 Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2024-47850: Fixed cups-browsed can be abused to initiate remote DDoS against third-party targets bsc1231294...
SUSE SLES12: cups-filters / cups-filters-cups-browsed / etc (SUSE-SU-2024:3711-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3711-1 advisory. - cups-browsed would bind on UDP INADDRANY:631 and trust any packet from any source to trigger a Get-Printer-Attributes IPP request...
Medium: cups-filters
Issue Overview: CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. The cfGetPrinterAttributes5 function ...
SUSE: Security Advisory (SUSE-SU-2024:3570-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for cups-filters
This update for cups-filters fixes the following issues: CVE-2024-47176: cups-browsed binds on UDP port 631 and trusts packets that try to trigger a Get-Printer-Attributes IPP request. bsc1230939 CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets...
SUSE-SU-2024:3570-1 Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2024-47176: cups-browsed binds on UDP port 631 and trusts packets that try to trigger a Get-Printer-Attributes IPP request. bsc1230939 - CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets...
SUSE CVE-2024-47850
CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. The request is meant to probe the new printer but can be used to create DDoS...
CVE-2024-47850
CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. The request is meant to probe the new printer but can be used to create DDoS...
CVE-2024-47850 affecting package cups for versions less than 1.28.17-3
CVE-2024-47850 affecting package cups for versions less than 1.28.17-3. A patched version of the package is available...