Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 16.04 LTS USN-7043-3: cups-filters remote access risk

ubuntu
Calendar Grey October 7, 2024
Scroller Ubuntu
Stay informed on Ubuntu Security Notice USN-7043-3 regarding cups-filters vulnerabilities and risks of remote execution.
cups-filters could be made to run programs if it received specially crafted network traffic.

Summary

cups-filters could be made to run programs if it received specially crafted

network traffic.

Software Description:

- cups-filters: OpenPrinting CUPS Filters

Details:

USN-7043-1 fixed a vulnerability in cups-filters. This update provides

the corresponding update for Ubuntu 16.04 LTS

Original advisory details:

Simone Margaritelli discovered that the cups-filters cups-browsed

component could be used to create arbitrary printers from outside

the local network. In combination with issues in other printing

components, a remote attacker could possibly use this issue to

connect to a system, created manipulated PPD files, and execute

arbitrary code when a printer is used. This update

disables support for the legacy CUPS printer discovery protocol.

(CVE-2024-47176)

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  cups-browsed                    1.8.3-2ubuntu3.5+esm2
                                  Available with Ubuntu Pro
  cups-filters                    1.8.3-2ubuntu3.5+esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7043-3

https://ubuntu.com/security/notices/USN-7043-2

https://ubuntu.com/security/notices/USN-7043-1

CVE-2024-47176

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7043-3

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.