发布时间: 2024年9月26日
修改时间: 2024年10月30日
CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPrinterAttributes5` function in `libcupsfilters` does not sanitize IPP attributes returned from an IPP server. When these IPP attributes are used, for instance, to generate a PPD file, this can lead to attacker controlled data to be provided to the rest of the CUPS system.
| NVD | openEuler | |
|---|---|---|
| CVSS评分 | 8.6 | None |
| 公告名 | 概要 | 发布时间 |
|---|---|---|
| KylinSec-SA-2024-3926 | cups security update | 2024年10月12日 |
| 产品 | 包 | 状态 |
|---|---|---|
| KY3.4-5A | cups | Fixed |
| KY3.5.2 | cups | Fixed |
| KY3.3-9 | cups | Fixed |
| KY3.2-8 | cups | Unaffected |
| KY3.0-11 | cups | Unaffected |
