cups: libppd: remote command injection via attacker controlled data in PPD file

A security vulnerability was found in OpenPrinting CUPS. The function ppdCreatePPDFromIPP2 in the libppd library is responsible for generating a PostScript Printer Description PPD file based on attributes retrieved from an Internet Printing Protocol IPP response. Essentially, it takes printer...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2024-2932)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP12 : cups (EulerOS-SA-2024-2947)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CUPS is a standards-based, open-source printing system, and libppd can be used for legacy PPD file support. The libppd function ppdCreatePPDFromIPP2...

Metasploit Weekly Wrap-Up 11/29/2024

New module content 4 Acronis Cyber Protect/Backup machine info disclosure Authors: Sandro Tolksdorf of usd AG. and h00die-gr3y [email protected] Type: Auxiliary Pull request: 19582 contributed by h00die-gr3y Path: gather/acroniscyberprotectmachineinfodisclosure AttackerKB reference:...

Exploit for CVE-2025-29329

CVE-2025-29329 - Sagemcom F@st 3686 ippprint Buffer Overflow R...

CVE-2022-33861

IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to accept invalid data...

CVE-2022-33862

IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and access vulnerable systems...

CVE-2022-33862 Improper access control mechanism in IPP

IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and access vulnerable systems...

CVE-2022-33862

CVE-2022-33862 affects Eaton IPP software prior to v1.71, with a default credentials vulnerability. Root cause: insecure/default credentials allowing a local attacker (Privilege: HIGH) with no user interaction to access confidential data and take control. Impact: potential compromise of authentic...

CVE-2022-33862 Improper access control mechanism in IPP

IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and access vulnerable systems...

CVE-2022-33861

The CVE-2022-33861 issue affects Eaton IPP software before v1.71, where data authenticity is not sufficiently verified, allowing acceptance of invalid data. Multiple connected sources (e.g., PT-2024-11583, Red Hat advisories, CNNVD, and CVE records) corroborate that IPP versions prior to 1.71 are...

CVE-2022-33861 Insufficient verification of authenticity in IPP

IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to accept invalid data...

CVE-2022-33861 Insufficient verification of authenticity in IPP

IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to accept invalid data...

Intel oneAPI Base Toolkit < 2024.2.0 Multiple Vulnerabilities

Multiple vulnerabilities exist in Intel oneAPI Base Toolkit versions prior to 2024.2.0. See vendor advisory for more details. - Uncontrolled search path for some Intel® Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escalation of...

CVE-2024-28952

Uncontrolled search path for some IntelR IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28952

CVE-2024-28952 affects Intel IPP for Windows before 2021.12.0 and Intel oneAPI Base Toolkit before 2024.2.0. Root cause: uncontrolled search path in affected components. Impact: may allow an authenticated, local user to escalate privileges (high impact on confidentiality, integrity, and availabil...

CVE-2024-28952

Uncontrolled search path for some IntelR IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® IPP Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Intel® IPP software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28952 Description: Uncontrolled...

Medium: cups-filters

Issue Overview: CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDRANY:631, causing it to trust any packet from any source,...

SUSE SLES12: cups-filters / cups-filters-cups-browsed / etc (SUSE-SU-2024:3711-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3711-1 advisory. - cups-browsed would bind on UDP INADDRANY:631 and trust any packet from any source to trigger a Get-Printer-Attributes IPP request...