Поиск уязвимостей

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

CUPS is a standards-based, open-source printing system, and `libppd` c ...

Security update for cups-filters

Уязвимость демона cups-browsed сервера печати CUPS, позволяющая нарушителю выполнить произвольный код и раскрыть защищаемую информацию

Security update for cups-filters

Security update for cups-filters

Low: cups security update

Low: cups security update

ELSA-2025-0083: cups security update (LOW)

ELSA-2024-9470: cups security update (LOW)

Уязвимость функции ppdCreatePPDFromIPP2 библиотеки libppd сервера печати CUPS, позволяющая нарушителю записывать произвольные данные

Security update for cups-filters

Security update for cups-filters

Уязвимость cups

Уязвимость cups

ALT-PU-2024-14888: package `libppd` update to version 2.1.0-alt1

Security update for cups

ALT-PU-2024-14891: package `cups-browsed` update to version 2.1.0-alt1

ALT-PU-2024-14167: package `cups` update to version 2.4.11-alt1