cups-filters vulnerability

2014-05-0800:00:00

ubuntu.com

6.9 Medium

AI Score

Confidence

Low

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

54.1%

JSON

Releases

Ubuntu 14.04 ESM

Packages

cups-filters - OpenPrinting CUPS Filters

Details

Sebastian Krahmer discovered that cups-browsed incorrectly filtered remote
printer names and strings. A remote attacker could use this issue to
possibly execute arbitrary commands. (CVE-2014-2707)

Johannes Meixner discovered that cups-browsed ignored invalid BrowseAllow
directives. This could cause it to accept browse packets from all hosts,
contrary to intended configuration.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchcups-browsed< 1.0.52-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchcups-filters< 1.0.52-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchcups-filters-core-drivers< 1.0.52-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchlibcupsfilters-dev< 1.0.52-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchlibcupsfilters1< 1.0.52-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchlibfontembed-dev< 1.0.52-0ubuntu1.1UNKNOWN
Ubuntu14.04noarchlibfontembed1< 1.0.52-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	cups-browsed	< 1.0.52-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	cups-filters	< 1.0.52-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	cups-filters-core-drivers	< 1.0.52-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	libcupsfilters-dev	< 1.0.52-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	libcupsfilters1	< 1.0.52-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	libfontembed-dev	< 1.0.52-0ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	libfontembed1	< 1.0.52-0ubuntu1.1	UNKNOWN