Lucene search

K
gentooGentoo FoundationGLSA-201607-06
HistoryJul 16, 2016 - 12:00 a.m.

CUPS: Buffer overflow

2016-07-1600:00:00
Gentoo Foundation
security.gentoo.org
23

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.019

Percentile

88.5%

Background

CUPS, the Common Unix Printing System, is a full-featured print server.

Description

A vulnerability has been discovered in CUPS concerning the handling of compressed raster files.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process.

Workaround

There is no known workaround at this time.

Resolution

All CUPS users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-print/cups-2.0.2-r1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-print/cups< 2.0.2-r1UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.019

Percentile

88.5%