Ubuntu 23.04: USN-6128-1 Critical: CUPS Denial of Service Attack

ubuntu

June 1, 2023

CUPS could be made to crash or run programs if it received specially crafted network traffic.

Summary

CUPS could be made to crash or run programs if it received specially

crafted network traffic.

Software Description:

- cups: Common UNIX Printing System(tm)

Details:

It was discovered that CUPS incorrectly handled logging. A remote attacker

could use this issue to cause CUPS to crash, resulting in a denial of

service, or possibly execute arbitrary code.

Topics Covered

security advisory denial of service critical cups ubuntu network attack

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   cups                            2.4.2-3ubuntu2.1

Ubuntu 22.10:
   cups                            2.4.2-1ubuntu2.1

Ubuntu 22.04 LTS:
   cups                            2.4.1op1-1ubuntu4.2

Ubuntu 20.04 LTS:
   cups                            2.3.1-9ubuntu1.3

Ubuntu 18.04 LTS:
   cups                            2.2.7-1ubuntu2.10

In general, a standard system update will make all the necessary changes.