Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Debian 8 Jessie: DLA-1893-1 Critical CUPS Stack Buffer Overflow

debian lts
Calendar Grey August 22, 2019
Dist Debian Esm H88
The latest CUPS security patch resolves urgent vulnerabilities in Debian 8 Jessie, aimed at reducing the potential for stack overflow exploits.
Two issues have been found in cups, the Common UNIX Printing System(tm)
Topics%20covered

Topics Covered

security advisory critical software update remote code execution debian cups stack buffer overflow

Summary

Basically both CVEs (CVE-2019-8675 and CVE-2019-8696) are about
stack-buffer-overflow in two functions of libcup. One happens in
asn1_get_type() the other one in asn1_get_packed().


For Debian 8 "Jessie", these problems have been fixed in version
1.7.5-11+deb8u5.

We recommend that you upgrade your cups packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: cups
Version: 1.7.5-11+deb8u5
CVE ID: CVE-2019-8675 CVE-2019-8696

Topics%20covered

Topics Covered

security advisory critical software update remote code execution debian cups stack buffer overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.