Описание
In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.
A Sandbox bypass has been discovered in cups on macOS due to insecure error handling. An attacker that has obtained sandboxed root access can use this flow to escape the sandbox.
Отчет
This issue did not affect the versions of cups as shipped with Red Hat Enterprise Linux as cups on Linux does not support the Sandbox feature.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | cups | Not affected | ||
| Red Hat Enterprise Linux 6 | cups | Not affected | ||
| Red Hat Enterprise Linux 7 | cups | Not affected | ||
| Red Hat Enterprise Linux 8 | cups | Not affected | ||
| Red Hat Virtualization 4 | cups | Not affected |
Показывать по
Дополнительная информация
Статус:
7 High
CVSS3
Связанные уязвимости
In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.
In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.
In macOS High Sierra before 10.13.5, an access issue was addressed wit ...
In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.
7 High
CVSS3