Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 555
Alerts This Week
Warning Icon 1 555

Ubuntu 18.04 LTS: USN-6391-2 Moderate: CUPS Code Execution Risk

ubuntu
Calendar Grey September 21, 2023
Dist Ubuntu Esm H88
Explore the Ubuntu Security Notice USN-6391-2, which addresses a vulnerability within CUPS that can lead to remote code execution or system instability. An update is strongly recommended.
CUPS could be made to crash or run programs if it opened a specially crafted file.

Summary

CUPS could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- cups: Common UNIX Printing System(tm)

Details:

USN-6391-1 fixed a vulnerability in CUPS. This update provides

the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that CUPS incorrectly parsed certain Postscript objects.

If a user or automated system were tricked into printing a specially

crafted document, a remote attacker could use this issue to cause CUPS to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics%20covered

Topics Covered

security advisory denial of service code execution cups ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
  cups                            2.2.7-1ubuntu2.10+esm2

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
  cups                            2.1.3-4ubuntu0.11+esm4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6391-2

https://ubuntu.com/security/notices/USN-6391-1

CVE-2023-4504

Ubuntu Security Notice USN-6391-2

Topics%20covered

Topics Covered

security advisory denial of service code execution cups ubuntu

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.