Skip to content
Sign in
Not rated

CVE-2018-6553 The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links

Description

The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS.

Affected products and versions

Product Affected versions Fixed in
CUPS 1.7 earliest → < 1.7.2-0ubuntu1.10 1.7.2-0ubuntu1.10

Other CVEs of CUPS

The 2 CVEs of CUPS →
CVE-2018-4300 The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access… Not rated
Track this CVE