Lucene search

K
osvGoogleOSV:UBUNTU-CVE-2024-47175
HistoryOct 06, 2024 - 7:00 p.m.

UBUNTU-CVE-2024-47175

2024-10-0619:00:00
Google
osv.dev
95
ubuntu
cve-2024-47175
ppdcreateppdfromipp2
sanitize
ipp
attributes
ppd buffer
software

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

10.9%

ppdCreatePPDFromIPP2 does not sanitize IPP attributes when creating the PPD buffer

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

10.9%