625 matches found
CVE-2018-12155
CVE-2018-12155 affects Intel IPP prior to 2019 update1. Data leakage via cryptographic libraries could allow an authenticated local user to disclose information. Public documentation across multiple sources confirms: vulnerable component is Intel IPP (pre-2019 update1), and the root cause is data...
CVE-2018-12155
Data leakage in cryptographic libraries for Intel IPP before 2019 update1 release may allow an authenticated user to potentially enable information disclosure via local access...
Intel® Integrated Performance Primitives (Intel® IPP) Advisory
Summary: A potential security vulnerability in Intel® IPP may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12155 Description: Data leakage in cryptographic libraries for IntelR IPP before 2019...
EulerOS Virtualization 2.5.0 : cups (EulerOS-SA-2018-1329)
According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - CUPS printing system provides a portable printing layer for UNIXAr operating systems. It has been developed by Apple Inc.to promote ...
CVE-2017-15400
Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue...
Debian: Security Advisory (DLA-1412-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1412-1 : cups security update
Two vulnerabilities affecting the cups printing server were found which can lead to arbitrary IPP command execution and denial of service. CVE-2017-18190 A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IP...
[SECURITY] [DLA 1412-1] cups security update
Package : cups Version : 1.7.5-11+deb8u3 CVE ID : CVE-2017-18190 CVE-2017-18248 Two vulnerabilities affecting the cups printing server were found which can lead to arbitrary IPP command execution and denial of service. CVE-2017-18190 A localhost.localdomain whitelist entry in validhost in...
CVE-2018-3691
Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time...
CVE-2018-3691
Intel Integrated Performance Primitives Cryptography Library (IPC Lib) has a vulnerability in versions before 2018 U3.1 where constant-time execution is not guaranteed. This could allow information disclosure via side-channel leakage. Affected: IPC Cryptography Library; root cause: lack of consta...
CVE-2018-3691
Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time...
Intel® Integrated Performance Primitives Cryptography Library Update
Summary: Some implementations in Intel® Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time. - 4.7 Medium CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: Intel® Integrated Performance Primitives Cryptograph...
Arbitrary IPP Command Execution
libcups.so is vulnerable to arbitrary IPP command execution attacks. The vulnerability exists as a localhost.localdomain whitelist entry in the validhost function of scheduler/client.c allowed arbitrary IPP commands to be executed through POST requests to the CUPS daemon via DNS rebinding attacks...
openSUSE: Security Advisory for cups (openSUSE-SU-2018:0618-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED12 / SLES12 Security Update : cups (SUSE-SU-2018:0604-1)
This update for cups fixes the following issues : - CVE-2017-18190: Removed localhost.localdomain from list of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP command execution in conjunction with DNS rebinding. bsc1081557 Note that Tenable Network Security has extracted the...
CVE-2017-18190
A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS serve...
CVE-2017-18190
A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS serve...
CVE-2017-18190
A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS serve...
CVE-2017-18190
CVE-2017-18190 affects the CUPS printing system. Connected sources confirm a vulnerability where a localhost.localdomain whitelist entry in valid_host() (scheduler/client.c) in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon ...
CVE-2017-18190
A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS serve...