Summary
Joshua Mason discovered that CUPS incorrectly handled the secret key used
to access the administrative web interface. A remote attacker could
possibly use this issue to open a session as an administrator and execute
arbitrary code. (CVE-2022-26691)
It was discovered that CUPS incorrectly handled certain memory operations
when handling IPP printing. A remote attacker could possibly use this issue
to cause CUPS to crash, leading to a denial of service, or obtain sensitive
information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04
LTS. (CVE-2019-8842, CVE-2020-10001)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | cups | 2.2.7-1ubuntu2.9 |
| Ubuntu · 20.04 LTS 20.04:LTS | cups | 2.3.1-9ubuntu1.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | cups | 2.4.1op1-1ubuntu4.1 |
Vulnerabilities 3
-
Unscored —
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security …
-
Unscored —
An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Secur…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, m…