Lucene search
HistoryJun 22, 2014 - 9:55 p.m.
CVE-2014-4338
cve-2014-4338
cups-browsed
access restrictions
remote attackers
ip addresses
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6.4 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.6%
cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses.
Affected configurations
Node
linuxfoundationcups-filtersRange≤1.0.52
| CPE | Name | Operator | Version |
|---|---|---|---|
| linuxfoundation:cups-filters | linuxfoundation cups-filters | le | 1.0.52 |
Related
prion
prion
Design/Logic Flaw
2014-06-22 21:55:00
debiancve
debiancve
CVE-2014-4338
2014-06-22 21:55:03
ubuntucve
ubuntucve
CVE-2014-4338
2014-06-22 00:00:00
cvelist
cvelist
CVE-2014-4338
2014-06-22 21:00:00
nvd
nvd
CVE-2014-4338
2014-06-22 21:55:03
centos
centos
cups security update
2014-11-04 12:46:31
nessus
nessus
CentOS 7 : cups-filters (CESA-2014:1795)
2014-11-05 00:00:00
Scientific Linux Security Update : cups-filters on SL7.x x86_64 (20141103)
2014-11-04 00:00:00
RHEL 7 : cups-filters (RHSA-2014:1795)
2014-11-04 00:00:00
redhat
redhat
(RHSA-2014:1795) Moderate: cups-filters security update
2014-11-03 00:00:00
oraclelinux
oraclelinux
cups-filters security update
2014-11-03 00:00:00
cups-filters security, bug fix, and enhancement update
2015-11-23 00:00:00
openvas
openvas
CentOS Update for cups-filters CESA-2014:1795 centos7
2014-11-05 00:00:00
RedHat Update for cups-filters RHSA-2014:1795-01
2014-11-04 00:00:00
Oracle: Security Advisory (ELSA-2014-1795)
2015-10-06 00:00:00
mageia
mageia
Updated cups-filter packages fix security vulnerabilities
2014-06-20 00:26:53
securityvulns
securityvulns
[ MDVSA-2015:100 ] cups-filters
2015-04-19 00:00:00
cups-filters code execution
2015-04-19 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6.4 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.6%
Related for CVE-2014-4338