Skip to content
OpenAdvisories
Unscored USN-3842-1 1 CVE

cups vulnerability

Published Dec 10, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Jann Horn discovered that CUPS incorrectly handled session cookie
randomness. A remote attacker could possibly use this issue to perform
cross-site request forgery (CSRF) attacks.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS cups 1.7.2-0ubuntu1.11
Ubuntu · 16.04 LTS 16.04:LTS cups 2.1.3-4ubuntu0.6
Ubuntu · 18.04 LTS 18.04:LTS cups 2.2.7-1ubuntu2.2

Vulnerabilities 1

  • Unscored —
    CVE-2018-4700 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. No…

    cups cups Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-4700