Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 18.04 LTS USN-7043-2: cups-filters network threat

ubuntu
Calendar Grey October 1, 2024
Dist Ubuntu Esm H88
Uncover the security alert regarding cups-filters for Ubuntu 18.04 LTS that reveals potential vulnerabilities linked to network data flow.
cups-filters could be made to run programs if it received specially crafted network traffic.

Summary

cups-filters could be made to run programs if it received specially crafted

network traffic.

Software Description:

- cups-filters: OpenPrinting CUPS Filters

Details:

USN-7043-1 fixed a vulnerability in cups-filters. This update provides

the corresponding update for Ubuntu 18.04 LTS.

Original advisory details:

Simone Margaritelli discovered that the cups-filters cups-browsed component

could be used to create arbitrary printers from outside the local network.

In combination with issues in other printing components, a remote attacker

could possibly use this issue to connect to a system, created manipulated

PPD files, and execute arbitrary code when a printer is used. This update

disables support for the legacy CUPS printer discovery protocol.

Topics%20covered

Topics Covered

security advisory Ubuntu network traffic program execution cups-filters

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
  cups-browsed                    1.20.2-0ubuntu3.3+esm1
                                  Available with Ubuntu Pro
  cups-filters                    1.20.2-0ubuntu3.3+esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7043-2

https://ubuntu.com/security/notices/USN-7043-1

CVE-2024-47176

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7043-2

Topics%20covered

Topics Covered

security advisory Ubuntu network traffic program execution cups-filters

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here