cups security and bug fix update

1:2.2.6-38 - 1775590 - rastertoepson filter crashes with paper size A6 1:2.2.6-37 - forgot to enable optimization - 1833516 1:2.2.6-36 - 1838449 - ipp/socket backends connect to turned off device for eternity contimeout is not applied - 1689207 - Add failover backend - 1833516 - DirtyCleanInterva...

Oracle Linux 7 : cups (ELSA-2020-3864)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3864 advisory. - 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist rhel-7 - 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcupss...

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. A use-after-free flaw was found in the way the CUPS server parsed Internet Printing Protocol IPP packets. A malicious user able to send IPP requests to the CUPS server could use this flaw to crash the CUPS server or, potentially, execute arbitrary...

Denial Of Service (DoS)

cups is vulnerable to denial of service. A NULL pointer dereference flaw was found in the CUPS IPP routine, used for processing incoming IPP requests for the CUPS scheduler. An attacker could use this flaw to send specially-crafted IPP requests that would crash the cupsd daemon...

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. The vulnerability exists as a heap buffer overflow flaw was found in a CUPS administration interface CGI script. A local attacker able to connect to the IPP port TCP port 631 could send a malicious request causing the script to crash or, potentially...

Remote Code Execution

cups is vulnerable to remote code execution. The vulnerability exists as a flaw was found in the way CUPS handles the addition and removal of remote shared printers via IPP. A remote attacker could send malicious UDP IPP packets causing the CUPS daemon to crash...

RICOH SP C250DN Buffer Error Vulnerability

The RICOH SP C250DN is a printer from the Japanese company Ricoh RICOH. A security vulnerability exists in the way the embedded device parses IPP packets in the Ricoh SP C250DN version 1.05. An attacker could exploit this vulnerability by means of specially crafted packets to cause the device to...

CVE-2019-14310

Ricoh SP C250DN 1.05 devices allow denial of service issue 2 of 3. Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets...

CVE-2019-13192

Some Brother printers such as the HL-L8360CDW v1.20 were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device...

CVE-2019-13165

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS and potentially execute arbitrary code on the device...

CVE-2019-13168

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the attributes parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS and potentially execute arbitrary code on the device...

CVE-2019-13165

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS and potentially execute arbitrary code on the device...

CVE-2019-13192

Some Brother printers such as the HL-L8360CDW v1.20 were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device...

Memory corruption

Ricoh SP C250DN 1.05 devices allow denial of service issue 2 of 3. Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets...

Buffer overflow

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the attributes parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS and potentially execute arbitrary code on the device...

Heap overflow

Some Brother printers such as the HL-L8360CDW v1.20 were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device...

Buffer overflow

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the request parser of the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS and potentially execute arbitrary code on the device...

CVE-2019-14310

Ricoh SP C250DN 1.05 devices allow denial of service issue 2 of 3. Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets...

CVE-2019-13192

Some Brother printers such as the HL-L8360CDW v1.20 were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device...

CVE-2019-13192

CVE-2019-13192 affects Brother printers (e.g., HL-L8360CDW v1.20). The IPP service fails to parse some attribute names, causing a heap/buffer overflow that could allow remote code execution on the device. Documented impact is device compromise with arbitrary code execution; exploitation details a...